@soloworks/smking-next@0.23.2
AI-native SEO (AEO) for Next.js — auto-inject JSON-LD, FAQ, AI summary, and SEO metadata so AI crawlers (ChatGPT, Perplexity, Google AI) can cite your pages.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe runtime proxy automatically reports observed site hosts and page paths when published-v2 reporting is configured. This is beyond basic package and runtime telemetry, and no disclosure of this collection was found in the README, so it warrants a warning.
Decision evidence
public snapshot- When the proxy observes a page request under published-v2 mode, it schedules a report containing the site host and request path.
- The report includes the API key and SDK metadata, then POSTs to the configured base URL at /api/v2/sdk/report.
- Reporting is gated on SMKING_WEBHOOK_SECRET being set and is throttled per host and path for one minute.
- The package has no install, preinstall, or postinstall lifecycle script.
- The report uses the configured service base URL and signs its payload with the configured webhook secret.
- The CLI's project edits happen only when its install subcommand is explicitly run.
Source & flagged code
5 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/lib/webhook-route.tsView on unpkgWhen the proxy observes a page request under published-v2 mode, it schedules a report containing the site host and request path.
src/lib/proxy.tsView on unpkg · L107Findings
Affected versions and remediation
This report applies to @soloworks/smking-next@0.23.2.
See all versions of @soloworks/smking-next for other recorded verdicts.
- Review the evidence and your use of @soloworks/smking-next@0.23.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.