registry / luckiest-co / 1.0.0
luckiest-co@1.0.0
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
2 flaggedbin/install.jsView file
10const readline = require('readline');
L11: const { execFileSync } = require('child_process');
L12:
High
180function apiBaseUrl() {
L181: return (process.env.LUCKIEST_API_URL || 'https://luckiest.co').replace(/\/$/, '');
L182: }
...
L185: try {
L186: execFileSync('unzip', ['-v'], { stdio: 'ignore' });
L187: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/install.jsView on unpkg · L180Findings
2 High2 Medium2 Low
HighChild Processbin/install.js
HighSame File Env Network Executionbin/install.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to luckiest-co@1.0.0.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.