luckiest-co@1.0.13
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe configurable API destination creates a conditional credential exposure risk when a key is saved and the CLI is invoked. The inspected code does not establish covert theft or default forwarding to an unrelated recipient, so this warrants a warning rather than a block.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Explicit invocation of the luckiest-co installer or --sync-only while a saved key is present.
Impact
A user-configured endpoint can receive the Luckiest connection key; the reviewed code does not constrain the destination to api.luckiest.co.
Mechanism
The installer builds its API base from LUCKIEST_API_URL or the Luckiest default and sends the saved key in the Authorization Bearer header.
AI rationale
The configurable API destination creates a conditional credential exposure risk when a key is saved and the CLI is invoked. The inspected code does not establish covert theft or default forwarding to an unrelated recipient, so this warrants a warning rather than a block.
Evidence
bin/install.js
Network endpoints1
api.luckiest.co
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI accepts LUCKIEST_API_URL as its API base, defaulting to api.luckiest.co.
- The saved connection key is sent as a Bearer credential to that selected API base during skill sync.
- Sync runs from the explicitly invoked installer or its --sync-only mode.
- The usage hook is registered only after an opt-in flag or affirmative prompt; non-interactive runs skip it.
- The graph helper passes diagram input to Graphviz when explicitly run with a skill directory.
- The flagged query-ID helper discovers and fetches X.com pages and bundles; the brainstorming server writes its server-info file with owner-only permissions.
Evidence against
- The endpoint override is a concrete credential-forwarding risk, but the source does not show a default package-controlled recipient or silent activation.
- The manifest defines a user-run CLI and contains no npm lifecycle scripts.
- The flagged network and process behavior is consistent with skill sync, query-ID discovery, graph rendering, and a local companion server.
Behavioral surface
ChildProcess
Source & flagged code
9 flaggedbin/install.jsView file
10const readline = require('readline');
L11: const { execFileSync } = require('child_process');
L12:
High
187function apiBaseUrl() {
L188: return (process.env.LUCKIEST_API_URL || 'https://api.luckiest.co').replace(/\/$/, '');
L189: }
...
L192: try {
L193: execFileSync('unzip', ['-v'], { stdio: 'ignore' });
L194: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/install.jsView on unpkg · L187•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
.includes('-l');
const synconly = args.includes('--sync-only');
const hashook = args.includes('--hook');
const hasnohook = args.includes('--no-hook');
function parseconfigdirarg() {
const configdirindex = args.findindex(arg => arg === '--config-dir' || arg === '-c');
if (configdirindex !== -1) {
const nextarg = args[configdirindex + 1];
if (!nextarg || nextarg.startswith('-')) {
console.error(` ${yellow}--config
Findings
8 High4 Medium5 Low
HighChild Processbin/install.js
HighShell
HighSame File Env Network Executionbin/install.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedpackage.json
HighKnown Malware Source Similarityskills/luckiest-coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/luckiest-trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
HighPrevious Version Dangerous Deltaskills/luckiest-coder-brainstorming/scripts/server.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/luckiest-coder-brainstorming/scripts/stop-server.sh
Affected versions and remediation
This report applies to luckiest-co@1.0.13.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.