registry / luckiest-co / 1.0.56
luckiest-co@1.0.56
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe suspicious findings resolve to explicit installer behavior, manual utilities, or disclosed telemetry limited to Luckiest skill metadata and hashed identifiers. No install-time exfiltration, unauthorized account action, or concealed execution was identified.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The installer runs when invoked; usage reporting runs on Luckiest skill use when its hook is enabled, and the update check runs at session start.
Impact
No malicious impact identified. The observed network activity supports skill usage statistics and update notices.
Mechanism
The usage hook sends skill metadata and hashed identifiers to the Luckiest API. The update hook performs a public manifest GET.
AI rationale
The suspicious findings resolve to explicit installer behavior, manual utilities, or disclosed telemetry limited to Luckiest skill metadata and hashed identifiers. No install-time exfiltration, unauthorized account action, or concealed execution was identified.
Network endpoints2
api.luckiest.coraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes an explicit CLI; its only lifecycle script is prepublishOnly, which is not a registry-install hook.
- The CLI asks before registering the usage hook; non-interactive installs skip it unless --hook is supplied.
- The hook is disclosed as skill-usage telemetry and reports only Luckiest skill slug, match status, plugin version, and hashed identifiers.
- Usage telemetry goes to the package's own API by default; the update hook checks a public manifest weekly.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
12 flaggedbin/sync-plugin-repo.jsView file
9L10: const { execFileSync } = require('child_process');
L11: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L9skills/video-studio/scripts/qa.mjsView file
690passes = prompts.map((p, i) => {
L691: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L692: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/video-studio/scripts/qa.mjsView on unpkg · L690571window.__timelines={main:gsap.timeline({paused:true}).to({},{duration:1})};</script></body></html>`);
L572: const hf = spawnSync("hyperframes", ["--version"]).error ? ["npx", `hyperframes@${version}`] : ["hyperframes"];
L573: const r = spawnSync(hf[0], [...hf.slice(1), "snapshot", proj, "--at", "0.5", "--no-end", "-o", join(proj, ".snap"), "--describe", "false"], { encoding: "utf8" });
Findings
1 Critical9 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltaskills/coder-components/scripts/kit-parity.mjs
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighRuntime Package Installskills/video-studio/scripts/qa.mjs
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
Affected versions and remediation
This report applies to luckiest-co@1.0.56.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.56 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.