registry / luckiest-co / 1.0.17
luckiest-co@1.0.17
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe manifest exposes a CLI without install lifecycle hooks. Source inspection found consent-gated settings mutation and package-aligned utilities, with no concrete malicious behavior established.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Running the CLI or invoking the relevant skill utilities.
Impact
No malicious impact was established from the inspected behavior.
Mechanism
The installer can register a usage hook after opt-in; the other inspected files implement a local WebSocket protocol, diagram rendering, and X search discovery.
AI rationale
The manifest exposes a CLI without install lifecycle hooks. Source inspection found consent-gated settings mutation and package-aligned utilities, with no concrete malicious behavior established.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and declares no lifecycle hooks.
- The installer adds its usage hook only after an explicit flag or interactive consent; unattended installs decline by default.
- The installer removes a stale duplicate command directory only when the marketplace plugin is present.
- The brainstorming server enforces masked client frames, consistent with its local WebSocket protocol.
- The graph renderer extracts diagrams from skill documentation and renders them as SVG.
- The trends utility uses X pages as discovery inputs; this is consistent with its search functionality.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flaggedbin/install.jsView file
10const readline = require('readline');
L11: const { execFileSync } = require('child_process');
L12:
High
187function apiBaseUrl() {
L188: return (process.env.LUCKIEST_API_URL || 'https://api.luckiest.co').replace(/\/$/, '');
L189: }
...
L192: try {
L193: execFileSync('unzip', ['-v'], { stdio: 'ignore' });
L194: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/install.jsView on unpkg · L187•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
.includes('-l');
const synconly = args.includes('--sync-only');
const hashook = args.includes('--hook');
const hasnohook = args.includes('--no-hook');
function parseconfigdirarg() {
const configdirindex = args.findindex(arg => arg === '--config-dir' || arg === '-c');
if (configdirindex !== -1) {
const nextarg = args[configdirindex + 1];
if (!nextarg || nextarg.startswith('-')) {
console.error(` ${yellow}--config
Findings
8 High4 Medium5 Low
HighChild Processbin/install.js
HighShell
HighSame File Env Network Executionbin/install.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedskills/luckiest-coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/luckiest-coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/luckiest-trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
HighPrevious Version Dangerous Deltaskills/luckiest-coder-brainstorming/scripts/server.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/luckiest-coder-brainstorming/scripts/stop-server.sh
Affected versions and remediation
This report applies to luckiest-co@1.0.17.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.