luckiest-co@1.0.59
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe marketplace hook reports skill-use metadata by default, and the package does not provide a way to disable that reporting while keeping the plugin enabled. The telemetry is disclosed and does not include prompts or file contents, so this is a warning-level privacy concern rather than malicious exfiltration.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
After a Luckiest skill runs through the marketplace plugin.
Impact
The vendor can associate skill-use events with a stable install, session, or account identifier. No prompt, tool output, or file contents are reported by this hook.
Mechanism
A PostToolUse hook posts skill metadata and hashed identifiers to the Luckiest API; when available, it includes the Luckiest connection key as a bearer credential.
AI rationale
The marketplace hook reports skill-use metadata by default, and the package does not provide a way to disable that reporting while keeping the plugin enabled. The telemetry is disclosed and does not include prompts or file contents, so this is a warning-level privacy concern rather than malicious exfiltration.
Evidence
hooks/hooks.jsonhooks/report-skill-usage.mjsREADME.md~/.luckiest/key~/.luckiest/last-update-checkClaude settings.json
Network endpoints2
api.luckiest.co/api/skills/telemetryraw.githubusercontent.com/luckiestco/luckiest-plugin/main/.claude-plugin/plugin.json
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The marketplace hook configuration runs usage reporting after Skill calls and describes telemetry on every Luckiest skill run.
- The hook posts skill slug, plugin version, and hashed install or session identifiers to the Luckiest API; it may also send the Luckiest connection key as a bearer credential.
- The README discloses metadata-only usage reporting and says prompts, tool output, and file contents are not sent.
- The npx installer asks before registering its usage hook and declines when no terminal is available; the marketplace hook configuration has no corresponding telemetry opt-out.
Evidence against
- The telemetry is disclosed in both the plugin hook description and README.
- The reported skill metadata goes to the package’s own API, and the README says prompt text, tool output, and file contents are excluded.
- The installer prompts before saving a Luckiest connection key and sends it to the Luckiest API for owned-skill sync.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
11 flaggedbin/sync-plugin-repo.jsView file
9L10: const { execFileSync } = require('child_process');
L11: const fs = require('fs');
High
Child Process
Package source references child process execution.
bin/sync-plugin-repo.jsView on unpkg · L9skills/video-studio/scripts/qa.mjsView file
690passes = prompts.map((p, i) => {
L691: const r = spawnSync(opt("--cmd"), { shell: true, input: p, encoding: "utf8", maxBuffer: 1 << 26 });
L692: writeFileSync(join(out, `pass${i + 1}.txt`), (r.stdout ?? "") + (r.stderr ?? ""));
High
Shell
Package source references shell execution.
skills/video-studio/scripts/qa.mjsView on unpkg · L690571window.__timelines={main:gsap.timeline({paused:true}).to({},{duration:1})};</script></body></html>`);
L572: const hf = spawnSync("hyperframes", ["--version"]).error ? ["npx", `hyperframes@${version}`] : ["hyperframes"];
L573: const r = spawnSync(hf[0], [...hf.slice(1), "snapshot", proj, "--at", "0.5", "--no-end", "-o", join(proj, ".snap"), "--describe", "false"], { encoding: "utf8" });
Findings
9 High4 Medium7 Low
HighChild Processbin/sync-plugin-repo.js
HighShellskills/video-studio/scripts/qa.mjs
HighSame File Env Network Executionbin/install.js
HighExternal Ai Agent Control Surface Mutationhooks/update-notice.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighRuntime Package Installskills/video-studio/scripts/qa.mjs
HighSemantic Analysis Limitedskills/coder-brainstorming/scripts/server.cjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/coder-writing-skills/render-graphs.js
HighKnown Malware Source Similarityskills/trends/scripts/lib/vendor/bird-search/lib/runtime-query-ids.js
MediumNetwork
Medium
Affected versions and remediation
This report applies to luckiest-co@1.0.59.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.59 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.