luckiest-co@1.0.18
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe source shows conditional credential exposure: an unrestricted LUCKIEST_API_URL override can receive a saved service key during sync. The default destination is package-aligned, so this supports a warning rather than a publish block.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Running the explicit installer or sync flow when a saved key is available.
Impact
A user-configured alternate host can receive the Luckiest connection key.
Mechanism
The installer reads the environment override or defaults to api.luckiest.co, then sends the saved key in an Authorization bearer header.
AI rationale
The source shows conditional credential exposure: an unrestricted LUCKIEST_API_URL override can receive a saved service key during sync. The default destination is package-aligned, so this supports a warning rather than a publish block.
Evidence
bin/install.js
Network endpoints2
api.luckiest.coLUCKIEST_API_URL
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The installer accepts a saved Luckiest connection key and sends it as a bearer credential to the owned-skills endpoint.
- LUCKIEST_API_URL overrides the default API base without a destination allowlist, so the saved key can be sent to an operator-configured host.
- The manifest exposes an explicit CLI installer and declares no lifecycle hook.
- The installer's telemetry hook requires an affirmative prompt or explicit --hook flag; noninteractive runs decline by default.
- The flagged renderer passes diagram text to the fixed dot executable through stdin, and the brainstorming server starts only when run as the main module.
Evidence against
- The installer’s default endpoint is api.luckiest.co, consistent with the connection key’s intended service.
- The connection key is prompted for and saved locally with restrictive file permissions.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
9 flaggedbin/install.jsView file
10const readline = require('readline');
L11: const { execFileSync } = require('child_process');
L12:
High
187function apiBaseUrl() {
L188: return (process.env.LUCKIEST_API_URL || 'https://api.luckiest.co').replace(/\/$/, '');
L189: }
...
L192: try {
L193: execFileSync('unzip', ['-v'], { stdio: 'ignore' });
L194: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/install.jsView on unpkg · L187•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
.includes('-l');
const synconly = args.includes('--sync-only');
const hashook = args.includes('--hook');
const hasnohook = args.includes('--no-hook');
function parseconfigdirarg() {
const configdirindex = args.findindex(arg => arg === '--config-dir' || arg === '-c');
if (configdirindex !== -1) {
const nextarg = args[configdirindex + 1];
if (!nextarg || nextarg.startswith('-')) {
console.error(` ${yellow}--config
Findings
8 High4 Medium5 Low
HighChild Processbin/install.js
HighShell
HighSame File Env Network Executionbin/install.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedskills/luckiest-coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/luckiest-coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/luckiest-trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
HighPrevious Version Dangerous Deltaskills/luckiest-coder-brainstorming/scripts/server.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/luckiest-coder-brainstorming/scripts/stop-server.sh
Affected versions and remediation
This report applies to luckiest-co@1.0.18.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.18 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.