seo@0.17.3
VERIFIED· startup onlyPublisher claims: "The SEO command for AI agents: a free Google Search Console MCP server and CLI. Reads your real Search Console, Google Analytics and Bing data for traffic drops, quick wins, content decay, cannibalization and indexing, plus DataForSEO and Ahrefs keyword r" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher iannuttall · publishing for 4653 daysInstalls 10,271Last detonated 3d ago
Coverage
Startup only; authenticated tool behavior not tested.- Tested
- server startup over stdio (initialize sent) · every file read, file written and host contacted by what ran
- Not tested
- the tool list (the server exited before answering) · what the tools do when called with real credentials
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; startup only; authenticated tool behavior not tested) on 2026-11-11 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 40 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
19sprocessdependency install exit 0
39sclaimedstartup only: exited (0) before answering · code: 'ERR_MODULE_NOT_FOUND', url: 'file:///tmp/ks-detonate-IXPAC4/task/home/work/acme-api/.claude/skills/seo/dist/dist-CSPI6SOD.js' } Node.js v22.23.4
39sprocessscript backend runs setup only
39sprocessno install scripts to re-run
Static findings
MEDIUM
File type combined with upload actiondist/cli.js:104 · File type combined with upload action — agent may exfiltrate local data files
AST07… site check`: titles, canonicals, JSON-LD, sharing images, Markdown copies, llms.txt and sitemaps are done for every page.",`Later steps replace the example data and pages with yours.`),ea({title:`Next`,body:`Read the first step. Each step…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actiondist/cli.js:51 · File type combined with upload action — agent may exfiltrate local data files
AST07…emap, or sites. Start with sitemap --health for large sites. sites checks robots.txt, the home page and llms.txt for up to 1,000 sites from --urls or --urls-file.`},health:{type:`boolean`,default:!1,description:`Run the uncached sitemap st…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actiondist/cli.js:3 · File type combined with upload action — agent may exfiltrate local data files
AST07….position,reason:n.reason}))}function oi(e){return[{filename:`postmortem-summary.csv`,headers:[...w.summary],rows:[{workflow:e.workflow,site:e.site,generated_at:e.generatedAt,summary:e.summary,attribution:e.output.update.attribution,confid…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Collapsed <details> block carrying instructionsREADME.md:59 · Collapsed <details> block carrying instructions
AST01<summary><strong>The CLI</strong> (for crawls and Bing, which run on your machine)</summary> ```bash npm i -g seo seo start ``` `seo start` signs you in, connecFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
File type combined with upload actiondist/cli.js:48 · File type combined with upload action — agent may exfiltrate local data files
AST07…)return{status:`unknown`,title:`${i}: unknown`,explanation:n?.servesHtml?`robots.txt returned a web page, such as a bot challenge, not a robots.txt file.`:`robots.txt could not be read (${n?.availability??`not checked`}).`};let a=r.filter(…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actiondist/cli.js:32 · File type combined with upload action — agent may exfiltrate local data files
AST07…`required`:`optional`]})),t,{empty:`No parameters.`})}function I(e={}){return!(e.json||!process.stdin.isTTY||!process.stdout.isTTY||process.env.CI)}function L(e){let t=e&&typeof e==`object`&&!Array.isArray(e)?on():void 0,n=t?{...e,updateNo…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packageskills/seo/SKILL.md:14 · npx invocation of non-well-known package — may execute untrusted code
AST06CLI: `seo`, or `npx -y seo`. Add `--json` for JSON.Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
MCP server using network transport (SSE/HTTP)dist/cli.js:57 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04…(r))throw Error(`Cannot update ${e.path}: config root must be an object.`);if(r.mcpServers!==void 0&&!cs(r.mcpServers))throw Error(`Cannot update ${e.path}: mcpServers must be an object.`);return{source:t,config:r}}function us(e){return e.…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
npx invocation of non-well-known packagedist/cli.js:59 · npx invocation of non-well-known package — may execute untrusted code
AST06…rror:t.error.message}:t.status===0?{status:`installed`}:{status:`failed`,error:`npx skills add exited with status ${t.status??`unknown`}.`}}async function Ls(e){let t=asy…Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈2,126 tok
2 files · 74 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
No advisories in OSV for seo@0.17.3 as of 3d ago. This is the package itself, not its dependencies.