registry / @seoagent-official/seoagent / 1.89.5
@seoagent-official/seoagent@1.89.5
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection found no concrete credential theft or remote code execution. However, explicit initialization silently installs recurring Claude hooks that can invoke the latest package and synchronize project Markdown, so the automatic extension path warrants a warning.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs seoagent init, then Claude Code starts a session or completes a write or edit event.
Impact
The setup enables recurring CLI execution and cloud synchronization without a new prompt for each hook event. The inspected source does not establish credential theft or another concrete attack.
Mechanism
The CLI writes hooks to .claude/settings.json. They silently run sync, which can upload changed project Markdown to the configured SEOAgent API when saved project credentials are available.
AI rationale
Source inspection found no concrete credential theft or remote code execution. However, explicit initialization silently installs recurring Claude hooks that can invoke the latest package and synchronize project Markdown, so the automatic extension path warrants a warning.
Evidence
package.jsonindex.js.claude/settings.json.seoagent/
Network endpoints1
seoagent.com/api/cli/sync
Decision evidence
public snapshotAI called this Suspicious at 79.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes index.js as its seoagent command-line entrypoint.
- The integration targets .claude/settings.json and installs silent sync hooks for session starts and write or edit events. If the CLI is unavailable, the hook invokes the latest package through npx.
- The hooks are registered by the explicit seoagent init command.
- Sync uploads changed project Markdown to the configured API, using SEOAgent’s API as the default; it requires saved credentials and a project, and checks that the cloud project matches the local domain.
Evidence against
- The sync path checks for credentials and a project, and stops if the cloud project binding is mismatched or cannot be verified.
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedindex.jsView file
79- Bundle scaffolded.
L80: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as yt}from"@clack/prompts";var u={info:e=>yt.info(e),warn:e=>yt.warn(e),error:e=>yt.error(e),success:e=>yt.success(e),s...
L81: `))}import{existsSync as Xs}from"fs";import{intro as gp,outro as hp,confirm as yp,isCancel as wp,cancel as bp}from"@clack/prompts";import{existsSync as er,rmSync as mp}from"fs";imp...
...
L86: ${i}`),!e.global&&Xs(G)&&u.info("Your seoagent.com login (~/.config/seoagent/) was kept \u2014 it is shared across projects. Run `uninstall --global` to wipe it too."),u.info(`Re-i...
L87: `)}function Op(e,t){if(!t)return Me.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`);let n=Yt(t),r=e-5-n;return r<1?Me.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`):`${Me.dim("\u250C\u2500 ...
L88:
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L7985Trigger-reachable chain: manifest.main -> index.js
L85: ${i}`):hp(`Removed:
L86: ${i}`),!e.global&&Xs(G)&&u.info("Your seoagent.com login (~/.config/seoagent/) was kept \u2014 it is shared across projects. Run `uninstall --global` to wipe it too."),u.info(`Re-i...
L87: `)}function Op(e,t){if(!t)return Me.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`);let n=Yt(t),r=e-5-n;return r<1?Me.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`):`${Me.dim("\u250C\u2500 ...
L88:
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical3 High5 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighSemantic Analysis Limitedindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
MediumAi Review Evidenceindex.js
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.89.5.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.89.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.