@seoagent-official/seoagent@1.91.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not malicious install-hook behavior, but its explicit agent-control and command-execution capability warrants a warning. The source makes the risky execution user-invoked rather than automatic.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user runs seoagent init or seoagent process.
Impact
Queued remote work can lead to agent-driven edits and shell commands in the current project.
Mechanism
Project agent-instruction mutation and cloud-backed Claude Agent SDK execution.
AI rationale
This is not malicious install-hook behavior, but its explicit agent-control and command-execution capability warrants a warning. The source makes the risky execution user-invoked rather than automatic.
Evidence
index.jsAGENTS.md.claude/skills/seoagent.agents/skills/seoagent.seoagent/
Network endpoints1
seoagent.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The init path writes an SEOAgent section into the consumer project's AGENTS.md.
- The explicit process command sends queued work to the Claude Agent SDK with Write, Edit, and Bash enabled under accept-edits mode.
- The CLI synchronizes project state with seoagent.com, creating a remote-to-local agent-workflow channel.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The risky agent execution is reachable through an explicit seoagent process command, not package installation or import.
- No secret harvesting, opaque payload loading, or confirmed exfiltration was found.
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedindex.jsView file
85- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as bt}from"@clack/prompts";var u={info:e=>bt.info(e),warn:e=>bt.warn(e),error:e=>bt.error(e),success:e=>bt.success(e),s...
L87: `))}import{existsSync as Zs}from"fs";import{intro as Rp,outro as Ep,confirm as Ap,isCancel as Pp,cancel as Ip}from"@clack/prompts";import{existsSync as nr,rmSync as Cp}from"fs";imp...
...
L92: ${i}`),!e.global&&Zs(G)&&u.info("Your seoagent.com login (~/.config/seoagent/) was kept \u2014 it is shared across projects. Run `uninstall --global` to wipe it too."),u.info(`Re-i...
L93: `)}function Kp(e,t){if(!t)return Ue.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`);let n=Jt(t),r=e-5-n;return r<1?Ue.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`):`${Ue.dim("\u250C\u2500 ...
L94:
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8591Trigger-reachable chain: manifest.main -> index.js
L91: ${i}`):Ep(`Removed:
L92: ${i}`),!e.global&&Zs(G)&&u.info("Your seoagent.com login (~/.config/seoagent/) was kept \u2014 it is shared across projects. Run `uninstall --global` to wipe it too."),u.info(`Re-i...
L93: `)}function Kp(e,t){if(!t)return Ue.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`);let n=Jt(t),r=e-5-n;return r<1?Ue.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`):`${Ue.dim("\u250C\u2500 ...
L94:
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical3 High5 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidenceindex.js
MediumAi Review Evidenceindex.js
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.91.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.91.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.