registry / luckiest-co / 1.0.49
luckiest-co@1.0.49
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 19d ago · by lpm-firewall-aiI found no concrete malware behavior, but marketplace activation automatically sends Luckiest skill usage with persistent hashed identifiers and no separate telemetry opt-in. The installer’s separate CLI hook registration is consent-gated, which does not gate the marketplace hook.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs a Luckiest skill through the marketplace plugin.
Impact
Luckiest can associate reports across skill runs using persistent hashed identifiers; the inspected payload does not include prompts or tool output. Marketplace telemetry has no separate opt-in in the inspected source.
Mechanism
The PostToolUse hook posts the skill slug, plugin version, and hashed identifiers to the Luckiest API.
AI rationale
I found no concrete malware behavior, but marketplace activation automatically sends Luckiest skill usage with persistent hashed identifiers and no separate telemetry opt-in. The installer’s separate CLI hook registration is consent-gated, which does not gate the marketplace hook.
Evidence
hooks/hooks.jsonhooks/report-skill-usage.mjs
Network endpoints1
api.luckiest.co/api/skills/telemetry
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The plugin manifest runs a PostToolUse hook for Skill events.
- The hook reports Luckiest skill usage to api.luckiest.co and includes a stable install hash and a session hash.
- The hook derives the install hash from the machine hostname and home directory, creating a linkable identifier across runs.
- The CLI installer requires an explicit prompt or --hook flag to register its usage hook; marketplace activation does not use that installer prompt.
- The package lifecycle script runs only a version check; flagged subprocesses belong to task-specific graph rendering or video QA helpers.
Evidence against
- The telemetry is limited to Luckiest skill metadata; source says it does not send prompt text or tool output and ignores foreign skills.
- The telemetry destination is the package-aligned Luckiest API, and the marketplace plugin does not mutate consumer settings through bin/install.js.
- The video QA helper invokes npx only when explicitly run and the Hyperframes command is missing; the graph renderer pipes graph data to Graphviz.
Behavioral surface
Source & flagged code
12 flaggedbin/sync-plugin-repo.jsView file
6L7: const { execFileSync } = require('child_process');
L8: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L6skills/video-studio/scripts/qa.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = luckiest-co@1.0.41
matchedIdentity = npm:bHVja2llc3QtY28:1.0.41
similarity = 0.952
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
skills/video-studio/scripts/qa.mjsView on unpkg690passes = prompts.map((p, i) => {
L691: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L692: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
Findings
1 Critical9 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltaskills/video-studio/scripts/qa.mjs
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighRuntime Package Installskills/video-studio/scripts/qa.mjs
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
Affected versions and remediation
This report applies to luckiest-co@1.0.49.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.49 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.