registry / luckiest-co / 1.0.58
luckiest-co@1.0.58
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe installer has no automatic install hook and only submits a user-provided Luckiest key to the Luckiest API. Usage reporting is disclosed and limited to skill metadata and hashed identifiers; npx installs require opt-in to register it.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The installer runs when invoked; the usage hook runs for Luckiest skill calls when registered by the user or marketplace plugin.
Impact
Reviewed network activity supports the package's skill sync, update notice, and disclosed usage tracking; no credential theft or unrelated account action was identified.
Mechanism
The installer sends a saved Luckiest key to the Luckiest API for skill sync. The hook sends skill metadata and hashed identifiers to the Luckiest telemetry endpoint.
AI rationale
The installer has no automatic install hook and only submits a user-provided Luckiest key to the Luckiest API. Usage reporting is disclosed and limited to skill metadata and hashed identifiers; npx installs require opt-in to register it.
Evidence
~/.luckiest/key~/.luckiest/last-update-check~/.claude/settings.json~/.claude/skills/<name>~/.config/bird/query-ids-cache.json
Network endpoints5
api.luckiest.co/api/skills/ownedapi.luckiest.co/api/skills/telemetryraw.githubusercontent.com/luckiestco/luckiest-plugin/main/.claude-plugin/plugin.jsonx.comabs.twimg.com
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hook; its only lifecycle script is prepublishOnly.
- The installer asks the user for a Luckiest connection key and sends it as a Bearer token to the Luckiest skills API.
- For npx installs, registering the usage hook requires an opt-in flag or a prompt; non-interactive installs decline by default.
- The marketplace hook discloses skill-usage telemetry and sends skill slug, version, and hashed install/session identifiers, not prompts or tool output.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
11 flaggedbin/sync-plugin-repo.jsView file
9L10: const { execFileSync } = require('child_process');
L11: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L9skills/video-studio/scripts/qa.mjsView file
690passes = prompts.map((p, i) => {
L691: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L692: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/video-studio/scripts/qa.mjsView on unpkg · L690571window.__timelines={main:gsap.timeline({paused:true}).to({},{duration:1})};</script></body></html>`);
L572: const hf = spawnSync("hyperframes", ["--version"]).error ? ["npx", `hyperframes@${version}`] : ["hyperframes"];
L573: const r = spawnSync(hf[0], [...hf.slice(1), "snapshot", proj, "--at", "0.5", "--no-end", "-o", join(proj, ".snap"), "--describe", "false"], { encoding: "utf8" });
Findings
9 High4 Medium7 Low
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighRuntime Package Installskills/video-studio/scripts/qa.mjs
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
MediumNetwork
Medium
Affected versions and remediation
This report applies to luckiest-co@1.0.58.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.58 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.