registry / luckiest-co / 1.0.51
luckiest-co@1.0.51
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the installer is an explicit CLI. Inspected agent configuration writes require consent, while reviewed network behavior is limited to package-aligned metadata reporting or update checks.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs the installer or invokes a package utility; usage tracking runs only after hook registration.
Impact
No confirmed attack surface was established. The reviewed tracking behavior does not collect prompts or tool output.
Mechanism
The installer copies the package's skills. Usage tracking requires an affirmative prompt response or --hook and reports metadata for Luckiest skills to the Luckiest API.
AI rationale
The manifest has no install lifecycle hook, and the installer is an explicit CLI. Inspected agent configuration writes require consent, while reviewed network behavior is limited to package-aligned metadata reporting or update checks.
Evidence
bin/install.jshooks/report-skill-usage.mjs
Network endpoints1
api.luckiest.co
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes bin/install.js as an explicit CLI and defines no install lifecycle hook.
- The installer location cited by the scanner copies package skill files and renames copied skill folders to avoid clashes.
- The inspected utilities serve bounded product tasks: local brainstorming, user-invoked video rendering and QA, explicit repository sync, update notices, diagram rendering, and X query-ID caching.
- The installer declines usage-hook registration without a terminal or explicit --hook flag; its prompt describes the metadata collected.
- The usage hook filters for Luckiest skills and sends skill metadata to the package-aligned API, not prompt text or tool output.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
12 flaggedbin/sync-plugin-repo.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = luckiest-co@1.0.50
matchedIdentity = npm:bHVja2llc3QtY28:1.0.50
similarity = 0.976
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/sync-plugin-repo.jsView on unpkg9L10: const { execFileSync } = require('child_process');
L11: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L9skills/video-studio/scripts/qa.mjsView file
690passes = prompts.map((p, i) => {
L691: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L692: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
Findings
1 Critical9 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltabin/sync-plugin-repo.js
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighRuntime Package Installskills/video-studio/scripts/qa.mjs
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
Affected versions and remediation
This report applies to luckiest-co@1.0.51.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.51 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.