registry / luckiest-co / 1.0.32
luckiest-co@1.0.32
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe inspected high-risk findings map to explicit installer or feature behavior, with consent gates and package-aligned destinations. No concrete attack behavior was found, so this package is clean.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
An explicit user runs the installer or invokes a package feature that performs network or process operations.
Impact
No confirmed unauthorized credential exposure, broad agent configuration mutation, persistence, or payload execution was established.
Mechanism
The installer places Luckiest files in the selected Claude Code directory and gates usage-hook registration on consent; reviewed helpers perform bounded checks, local server functions, or user-requested tooling.
AI rationale
The inspected high-risk findings map to explicit installer or feature behavior, with consent gates and package-aligned destinations. No concrete attack behavior was found, so this package is clean.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the installer as an explicit command and declares no lifecycle scripts.
- The installer writes Luckiest’s own Claude Code files and removes only its own stale command or usage-hook entries; global versus local installation is selected by the user, and adding the usage hook requires consent.
- The update hook checks a public Luckiest plugin manifest and stores a timestamp; it does not download or execute an update.
- The brainstorming server uses a loopback host by default and its companion opening behavior is opt-in and limited to loopback.
- The graph renderer passes diagram text to Graphviz; the video QA shell command is supplied through an explicit command-line option.
- The trends helper discovers X client bundles and caches query identifiers for its search functionality.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
11 flaggedbin/install.jsView file
10const readline = require('readline');
L11: const { execFileSync } = require('child_process');
L12:
High
187function apiBaseUrl() {
L188: return (process.env.LUCKIEST_API_URL || 'https://api.luckiest.co').replace(/\/$/, '');
L189: }
...
L192: try {
L193: execFileSync('unzip', ['-v'], { stdio: 'ignore' });
L194: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/install.jsView on unpkg · L187•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
ly = args.includes('--sync-only');
const hashook = args.includes('--hook');
const hasnohook = args.includes('--no-hook');
function parseconfigdirarg() {
const configdirindex = args.findindex(arg => arg === '--config-dir' || arg === '-c');
if (configdirindex !== -1) {
const nextarg = args[configdirindex + 1];
if (!nextarg || nextarg.startswith('-')) {
console.error(` ${yellow}--config-dir requires a path argument
Findings
9 High4 Medium5 Low
HighChild Processbin/install.js
HighShellskills/luckiest-video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedskills/luckiest-coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/luckiest-coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/luckiest-trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
HighPrevious Version Dangerous Deltaskills/luckiest-coder-brainstorming/scripts/server.cjs
Medium
Affected versions and remediation
This report applies to luckiest-co@1.0.32.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.32 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.