registry / luckiest-co / 1.0.12
luckiest-co@1.0.12
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a first-party agent extension with automatic telemetry and a credential-reading search capability, but there is no unconsented npm lifecycle execution, broad foreign control-surface mutation, or concrete malware chain. It warrants a warning for extension lifecycle and privacy risk.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Installing the Claude Code plugin activates the declared hook; running the trends search invokes its credential resolver.
Impact
The vendor receives Luckiest skill identifiers, version, session hash, and a stable installation identifier; the trends command can use local X session cookies for X requests.
Mechanism
Claude hook telemetry and user-invoked X cookie-backed search
AI rationale
This is a first-party agent extension with automatic telemetry and a credential-reading search capability, but there is no unconsented npm lifecycle execution, broad foreign control-surface mutation, or concrete malware chain. It warrants a warning for extension lifecycle and privacy risk.
Evidence
package.jsonbin/install.jshooks/hooks.jsonhooks/report-skill-usage.mjsskills/luckiest-trends/scripts/lib/vendor/bird-search/bird-search.mjsskills/luckiest-trends/scripts/lib/vendor/bird-search/lib/cookies.js~/.luckiest/keybrowser cookie stores
Network endpoints2
api.luckiest.cox.com/
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The Claude Code plugin registers a command hook for every Skill tool event.
- The hook derives a stable installation hash from the hostname and home directory when no key exists.
- The hook sends telemetry to the package vendor's API after matching only Luckiest skill names.
- The bundled trends tool can retrieve X authentication cookies when the user runs its search command.
Evidence against
- package.json has no preinstall, install, or postinstall script.
- The npm installer is user-invoked and asks before adding its settings hook; noninteractive installs decline by default.
- The hook ignores non-Luckiest skills and sends metadata rather than prompts or tool output.
- The cookie-using client is documented and implemented as search-only for X.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
7 flaggedbin/install.jsView file
10const readline = require('readline');
L11: const { execFileSync } = require('child_process');
L12:
High
187function apiBaseUrl() {
L188: return (process.env.LUCKIEST_API_URL || 'https://api.luckiest.co').replace(/\/$/, '');
L189: }
...
L192: try {
L193: execFileSync('unzip', ['-v'], { stdio: 'ignore' });
L194: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/install.jsView on unpkg · L187•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
.includes('-l');
const synconly = args.includes('--sync-only');
const hashook = args.includes('--hook');
const hasnohook = args.includes('--no-hook');
function parseconfigdirarg() {
const configdirindex = args.findindex(arg => arg === '--config-dir' || arg === '-c');
if (configdirindex !== -1) {
const nextarg = args[configdirindex + 1];
if (!nextarg || nextarg.startswith('-')) {
console.error(` ${yellow}--config
Findings
6 High4 Medium5 Low
HighChild Processbin/install.js
HighShell
HighSame File Env Network Executionbin/install.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighKnown Malware Source Similarityskills/luckiest-coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/luckiest-trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/luckiest-coder-brainstorming/scripts/stop-server.sh
MediumStructural Risk Force Deep Review
LowWeak Cryptoskills/luckiest-coder-brainstorming/scripts/server.cjs
LowFilesystem
Affected versions and remediation
This report applies to luckiest-co@1.0.12.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.