luckiest-co@1.0.37
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe hook conditionally forwards a saved service key to an unrestricted operator-configured endpoint, so credential exposure is a real warning-level risk. The inspected installer asks before registering the hook and declines in noninteractive use by default.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A registered hook runs after a Luckiest skill event; the CLI registers it after opt-in or affirmative consent.
Impact
An overridden endpoint can receive the saved key along with usage telemetry.
Mechanism
The hook uses LUCKIEST_API_URL without restricting its destination and attaches the saved key as a Bearer header to its telemetry POST.
AI rationale
The hook conditionally forwards a saved service key to an unrestricted operator-configured endpoint, so credential exposure is a real warning-level risk. The inspected installer asks before registering the hook and declines in noninteractive use by default.
Evidence
hooks/report-skill-usage.mjsbin/install.jshooks/hooks.json
Network endpoints1
api.luckiest.co
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The telemetry hook accepts LUCKIEST_API_URL as its destination and otherwise uses api.luckiest.co.
- The hook reads the saved Luckiest key and adds it as a Bearer authorization header when present.
- On a Luckiest skill event, the hook POSTs telemetry to the selected API destination.
- The CLI registers its telemetry hook after explicit hook opt-in or an affirmative prompt; noninteractive installs default to declining.
Evidence against
- The package manifest exposes a CLI entrypoint and only a prepublishOnly lifecycle script.
- The hook filters to Luckiest skill names and sends usage fields rather than prompt text or tool output.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
11 flaggedbin/sync-plugin-repo.jsView file
6L7: const { execFileSync } = require('child_process');
L8: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L6skills/luckiest-video-studio/scripts/qa.mjsView file
504passes = prompts.map((p, i) => {
L505: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L506: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/luckiest-video-studio/scripts/qa.mjsView on unpkg · L504skills/luckiest-coder-brainstorming/scripts/server.cjsView file
Findings
9 High4 Medium7 Low
HighChild Processbin/sync-plugin-repo.js
HighShellskills/luckiest-video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedskills/luckiest-coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/luckiest-coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/luckiest-trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
HighPrevious Version Dangerous Deltaskills/luckiest-coder-brainstorming/scripts/server.cjs
Medium
Affected versions and remediation
This report applies to luckiest-co@1.0.37.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.