registry / luckiest-co / 1.0.26
luckiest-co@1.0.26
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 25d ago · by lpm-firewall-aiSource inspection found no package lifecycle hooks or concrete malicious behavior. The scanner-highlighted installer operations are command-triggered setup and guarded duplicate cleanup; the other inspected findings are consistent with local tools or public service functionality.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs the luckiest-co CLI or starts a package skill command.
Impact
No confirmed attack surface was established from the inspected source.
Mechanism
The installer performs package setup and optional owned-skill synchronization; the update hook checks a public manifest and reports a newer version without applying it.
AI rationale
Source inspection found no package lifecycle hooks or concrete malicious behavior. The scanner-highlighted installer operations are command-triggered setup and guarded duplicate cleanup; the other inspected findings are consistent with local tools or public service functionality.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes an explicit CLI installer and defines no lifecycle scripts.
- bin/install.js runs installation or skill sync only when invoked as a command; key entry is prompted for and optional.
- The installer removes a duplicate commands directory only when it detects the marketplace plugin is present.
- The update notice fetches a public version manifest and displays an update message; it does not install updates.
- The brainstorming server starts only when directly executed.
- The graph renderer passes diagram input to the local Graphviz command; the inspected video QA code invokes local media tools, and the query-ID helper is for X.com discovery.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
11 flaggedbin/install.jsView file
10const readline = require('readline');
L11: const { execFileSync } = require('child_process');
L12:
High
187function apiBaseUrl() {
L188: return (process.env.LUCKIEST_API_URL || 'https://api.luckiest.co').replace(/\/$/, '');
L189: }
...
L192: try {
L193: execFileSync('unzip', ['-v'], { stdio: 'ignore' });
L194: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/install.jsView on unpkg · L187•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
ly = args.includes('--sync-only');
const hashook = args.includes('--hook');
const hasnohook = args.includes('--no-hook');
function parseconfigdirarg() {
const configdirindex = args.findindex(arg => arg === '--config-dir' || arg === '-c');
if (configdirindex !== -1) {
const nextarg = args[configdirindex + 1];
if (!nextarg || nextarg.startswith('-')) {
console.error(` ${yellow}--config-dir requires a path argument
Findings
9 High4 Medium5 Low
HighChild Processbin/install.js
HighShellskills/luckiest-video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedskills/luckiest-coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/luckiest-coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/luckiest-trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
HighPrevious Version Dangerous Deltaskills/luckiest-coder-brainstorming/scripts/server.cjs
Medium
Affected versions and remediation
This report applies to luckiest-co@1.0.26.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.