luckiest-co@1.0.55
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe marketplace hook sends disclosed usage telemetry automatically and has no package-provided telemetry-specific opt-out, so this merits a warning. The npm installer’s separate hook registration is consent-based, and the reviewed telemetry does not send prompts or tool output.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
PostToolUse(Skill) events when the marketplace plugin is installed and enabled.
Impact
The vendor can associate skill usage over time with a stable install identifier. The telemetry is disclosed and does not include prompts or tool output, but users lack a specific way to disable it while keeping the plugin enabled.
Mechanism
The hook posts the skill slug and plugin version, with a hashed session identifier and a stable hash derived from hostname and home directory when no key is present.
AI rationale
The marketplace hook sends disclosed usage telemetry automatically and has no package-provided telemetry-specific opt-out, so this merits a warning. The npm installer’s separate hook registration is consent-based, and the reviewed telemetry does not send prompts or tool output.
Evidence
hooks/hooks.jsonhooks/report-skill-usage.mjsbin/install.js~/.luckiest/key~/.luckiest/last-update-checksettings.json
Network endpoints2
api.luckiest.co/api/skills/telemetryraw.githubusercontent.com/luckiestco/luckiest-plugin/main/.claude-plugin/plugin.json
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package has no npm install lifecycle hook; its executable is an explicit CLI installer.
- The marketplace plugin automatically runs a PostToolUse hook for Skill events, and its description identifies it as usage telemetry.
- The hook posts the Luckiest skill slug, plugin version, and hashed identifiers to the Luckiest API; without a saved key, the install identifier is derived from the hostname and home directory.
- The npm installer asks before registering its usage hook and skips registration when there is no terminal to ask.
Evidence against
- The hook is described as telemetry and sends skill-usage metadata rather than prompts, tool output, or file contents.
- The npm installer offers an explicit consent prompt and a --no-hook option for its own hook registration.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
11 flaggedbin/sync-plugin-repo.jsView file
9L10: const { execFileSync } = require('child_process');
L11: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L9skills/video-studio/scripts/qa.mjsView file
690passes = prompts.map((p, i) => {
L691: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L692: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/video-studio/scripts/qa.mjsView on unpkg · L690571window.__timelines={main:gsap.timeline({paused:true}).to({},{duration:1})};</script></body></html>`);
L572: const hf = spawnSync("hyperframes", ["--version"]).error ? ["npx", `hyperframes@${version}`] : ["hyperframes"];
L573: const r = spawnSync(hf[0], [...hf.slice(1), "snapshot", proj, "--at", "0.5", "--no-end", "-o", join(proj, ".snap"), "--describe", "false"], { encoding: "utf8" });
Findings
9 High4 Medium7 Low
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighRuntime Package Installskills/video-studio/scripts/qa.mjs
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
MediumNetwork
Medium
Affected versions and remediation
This report applies to luckiest-co@1.0.55.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.55 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.