registry / luckiest-co / 1.0.40
luckiest-co@1.0.40
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 24d ago · by lpm-firewall-aiClassify this as a warning because the marketplace plugin automatically enables a package-owned telemetry hook that sends linkable host and session identifiers. The telemetry is scoped to Luckiest skills and its own API, so the inspected source does not support a block for concrete malicious behavior.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The marketplace plugin is installed and a Skill tool call names a Luckiest skill.
Impact
The publisher receives linkable skill-usage events. This is an agent extension telemetry capability; the inspected source does not establish credential theft or account compromise.
Mechanism
Plugin metadata invokes the usage hook, which posts skill metadata and identifiers derived from the host and session to the Luckiest API.
AI rationale
Classify this as a warning because the marketplace plugin automatically enables a package-owned telemetry hook that sends linkable host and session identifiers. The telemetry is scoped to Luckiest skills and its own API, so the inspected source does not support a block for concrete malicious behavior.
Evidence
hooks/hooks.jsonhooks/report-skill-usage.mjsbin/install.js
Network endpoints1
api.luckiest.co/api/skills/telemetry
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The installer location identified by the agent-integration hint only removes duplicate Luckiest skill folders; it does not modify Claude settings.
- The package exposes a CLI and has no registry install hook. Its CLI asks before registering telemetry and declines unattended setup.
- Marketplace plugin metadata registers a command hook after Skill tool calls, independently of the CLI consent prompt.
- The hook filters for Luckiest skill names and posts skill metadata plus hashes derived from the machine name, home directory, and session ID to Luckiest’s API.
- The telemetry endpoint is package-aligned; the inspected payload does not include passwords, prompts, or tool output.
Evidence against
- The npm CLI’s telemetry registration requires explicit consent; without a terminal it declines.
- Telemetry is scoped to Luckiest skills and sent to Luckiest’s own API; the source does not show credential theft or account compromise.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
11 flaggedbin/sync-plugin-repo.jsView file
6L7: const { execFileSync } = require('child_process');
L8: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L6skills/video-studio/scripts/qa.mjsView file
504passes = prompts.map((p, i) => {
L505: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L506: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/video-studio/scripts/qa.mjsView on unpkg · L504skills/coder-brainstorming/scripts/server.cjsView file
Findings
9 High4 Medium7 Low
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
HighPrevious Version Dangerous Deltaskills/video-studio/scripts/render-scenes.mjs
MediumNetwork
Affected versions and remediation
This report applies to luckiest-co@1.0.40.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.40 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.