registry / luckiest-co / 1.0.42
luckiest-co@1.0.42
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 19d ago · by lpm-firewall-aiSource inspection found no malicious behavior. The agent-related installer behavior is limited to removing duplicate Luckiest skills, while telemetry hook registration requires affirmative consent or an explicit opt-in flag.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The installer runs when explicitly invoked; included utilities run when called by a user or their host application.
Impact
No confirmed unauthorized credential transfer, destructive action, or broad agent-control mutation was established.
Mechanism
The installer removes duplicate Luckiest skills and only adds its usage hook after consent. The inspected utilities sync a repository, run local media checks, render graphs, serve local content, and discover X query IDs.
AI rationale
Source inspection found no malicious behavior. The agent-related installer behavior is limited to removing duplicate Luckiest skills, while telemetry hook registration requires affirmative consent or an explicit opt-in flag.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a command-line installer; no npm install lifecycle hook is defined.
- The installer’s agent-related cleanup removes duplicate Luckiest skills, and usage-hook setup requires a prompt or explicit opt-in.
- The inspected utilities perform user-invoked repository syncing, local video QA, graph rendering, local server startup, and X query-ID discovery.
- The update hook checks a public plugin manifest; usage telemetry sends skill metadata to the package’s own API, not prompts or tool output.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
10 flaggedbin/sync-plugin-repo.jsView file
6L7: const { execFileSync } = require('child_process');
L8: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L6skills/video-studio/scripts/qa.mjsView file
628passes = prompts.map((p, i) => {
L629: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L630: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/video-studio/scripts/qa.mjsView on unpkg · L628skills/coder-brainstorming/scripts/server.cjsView file
Findings
8 High4 Medium7 Low
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/research/scripts/doctor.sh
Affected versions and remediation
This report applies to luckiest-co@1.0.42.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.42 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.