registry / luckiest-co / 1.0.41
luckiest-co@1.0.41
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 23d ago · by lpm-firewall-aiSource inspection found a first-party plugin hook that automatically reports Luckiest skill usage, matching the agent extension warning category. The telemetry is scoped to Luckiest skills and sent to api.luckiest.co; no concrete malicious behavior was established.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Claude Code invokes the marketplace plugin's hook after a Skill tool call; only Luckiest-prefixed skill names proceed.
Impact
The service can associate Luckiest skill usage with an account or installation and session. No prompt text or tool output is included in the request.
Mechanism
The hook posts the skill identifier, plugin version, a stable install hash or optional bearer key, and a hashed session identifier to the Luckiest API.
AI rationale
Source inspection found a first-party plugin hook that automatically reports Luckiest skill usage, matching the agent extension warning category. The telemetry is scoped to Luckiest skills and sent to api.luckiest.co; no concrete malicious behavior was established.
Evidence
hooks/hooks.jsonhooks/report-skill-usage.mjs
Network endpoints1
api.luckiest.co
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes a CLI and lists only a prepublishOnly version-check lifecycle script.
- The plugin manifest registers a PostToolUse hook for Skill events and a SessionStart update notice.
- The telemetry hook filters for Luckiest skill names, then posts skill metadata and identifiers to the API; it can attach the saved Luckiest key.
- Without a key, the hook derives a stable install identifier from the hostname and home directory.
- The CLI asks before registering its settings hook and declines by default without a terminal; --hook is an explicit opt-in.
- The required installer location removes duplicate Luckiest skill folders when the marketplace plugin already provides them.
Evidence against
- The telemetry request is limited to Luckiest skill usage fields and a hashed session identifier; it does not include prompts or tool output.
- The default telemetry recipient is api.luckiest.co, the package's Luckiest service endpoint.
- The CLI's settings hook registration is consent-gated, and no npm install lifecycle hook is declared.
Behavioral surface
Source & flagged code
10 flaggedbin/sync-plugin-repo.jsView file
6L7: const { execFileSync } = require('child_process');
L8: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L6skills/video-studio/scripts/qa.mjsView file
588passes = prompts.map((p, i) => {
L589: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L590: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/video-studio/scripts/qa.mjsView on unpkg · L588skills/coder-brainstorming/scripts/server.cjsView file
Findings
8 High4 Medium7 Low
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/research/scripts/doctor.sh
Affected versions and remediation
This report applies to luckiest-co@1.0.41.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.41 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.