registry / luckiest-co / 1.0.54
luckiest-co@1.0.54
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged process execution and network access support the package’s installer, skill sync, and QA tools. The only automatic reporting found is disclosed skill-usage telemetry with hashed identifiers; no malicious behavior was identified.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The installer acts when explicitly invoked; telemetry runs on Luckiest skill use and the update check runs at plugin session start.
Impact
No unauthorized credential transfer or harmful action was identified.
Mechanism
The installer uses a user-provided Luckiest key for the owned-skills API. The usage hook reports skill metadata and hashed identifiers; the update hook fetches a public plugin manifest.
AI rationale
The flagged process execution and network access support the package’s installer, skill sync, and QA tools. The only automatic reporting found is disclosed skill-usage telemetry with hashed identifiers; no malicious behavior was identified.
Evidence
~/.luckiest/key~/.luckiest/last-update-check~/.claude/skills/<name>settings.json
Network endpoints2
api.luckiest.coraw.githubusercontent.com/luckiestco/luckiest-plugin/main/.claude-plugin/plugin.json
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes an explicit CLI and has no install, preinstall, or postinstall hook; its only lifecycle script is prepublishOnly.
- The installer runs its main routine only when invoked as the CLI, and declines usage-hook setup without a terminal unless explicitly enabled.
- The plugin declares skill-usage telemetry and a weekly update notice; the installer describes the telemetry and offers a choice to enable it.
- The installer asks the user to provide a luckiest.co connection key and sends it as a bearer token to the owned-skills API.
- The usage hook sends the Luckiest skill identifier and version; its install and session identifiers are hashed.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
11 flaggedbin/sync-plugin-repo.jsView file
9L10: const { execFileSync } = require('child_process');
L11: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L9skills/video-studio/scripts/qa.mjsView file
690passes = prompts.map((p, i) => {
L691: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L692: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/video-studio/scripts/qa.mjsView on unpkg · L690571window.__timelines={main:gsap.timeline({paused:true}).to({},{duration:1})};</script></body></html>`);
L572: const hf = spawnSync("hyperframes", ["--version"]).error ? ["npx", `hyperframes@${version}`] : ["hyperframes"];
L573: const r = spawnSync(hf[0], [...hf.slice(1), "snapshot", proj, "--at", "0.5", "--no-end", "-o", join(proj, ".snap"), "--describe", "false"], { encoding: "utf8" });
Findings
9 High4 Medium7 Low
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighRuntime Package Installskills/video-studio/scripts/qa.mjs
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
MediumNetwork
Medium
Affected versions and remediation
This report applies to luckiest-co@1.0.54.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.54 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.