luckiest-co@1.0.9
Luckiest for Claude Code: plan, go, finish. Your luckiest.co skills and tribe, inside Claude.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo concrete unconsented install-time malicious chain was found. The package nonetheless ships real AI-agent capabilities involving remote payload installation, telemetry, browser-cookie access, and external tool installation, so it warrants a warning.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
User runs luckiest-co, enables its hook, or invokes the luckiest-trends skill.
Impact
Remote server content can be placed in Claude skills; opted-in telemetry and explicitly enabled cookie-based research can access sensitive local browser authentication data.
Mechanism
User-invoked Claude extension setup, telemetry, remote skill sync, and optional browser-cookie research tooling.
AI rationale
No concrete unconsented install-time malicious chain was found. The package nonetheless ships real AI-agent capabilities involving remote payload installation, telemetry, browser-cookie access, and external tool installation, so it warrants a warning.
Evidence
package.jsonbin/install.jshooks/report-skill-usage.mjsskills/luckiest-trends/SKILL.mdskills/luckiest-trends/scripts/lib/cookie_extract.pyskills/luckiest-trends/scripts/lib/setup_wizard.pyskills/luckiest-coder-writing-skills/render-graphs.js~/.luckiest/key~/.claude/settings.json~/.claude/skills/<name>/
Network endpoints2
api.luckiest.co/api/skills/ownedapi.luckiest.co/api/skills/telemetry
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- bin/install.js downloads authenticated, server-supplied skill ZIPs into ~/.claude/skills.
- hooks/report-skill-usage.mjs posts skill slug plus stable install/session hashes to api.luckiest.co.
- skills/luckiest-trends can extract X browser cookies and auto-install tools when explicitly activated.
Evidence against
- package.json has no npm lifecycle scripts.
- bin/install.js runs only via the user-invoked bin command.
- Hook registration requires --hook or an interactive opt-in; no-TTY installs decline.
- Cookie extraction is documented as requiring explicit first-run consent.
- render-graphs.js only invokes fixed Graphviz commands.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggedbin/install.jsView file
10const readline = require('readline');
L11: const { execFileSync } = require('child_process');
L12:
High
187function apiBaseUrl() {
L188: return (process.env.LUCKIEST_API_URL || 'https://api.luckiest.co').replace(/\/$/, '');
L189: }
...
L192: try {
L193: execFileSync('unzip', ['-v'], { stdio: 'ignore' });
L194: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/install.jsView on unpkg · L187skills/luckiest-coder-brainstorming/scripts/server.cjsView file
1const crypto = require('crypto');
L2: const http = require('http');
L3: const fs = require('fs');
...
L12: function computeAcceptKey(clientKey) {
L13: return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64');
L14: }
...
L84:
L85: const PORT_FILE = process.env.BRAINSTORM_PORT_FILE || null;
L86: const randomPort = () => 49152 + Math.floor(Math.random() * 16383);
...
L194: try { sessionStorage.setItem('brainstorm-session-key', ${jsonKey}); } catch (e) {}
L195: location.replace('/');
L196: </script>
Findings
4 High4 Medium5 Low
HighChild Processbin/install.js
HighShell
HighSame File Env Network Executionbin/install.js
HighKnown Malware Source Similarityskills/luckiest-coder-writing-skills/render-graphs.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/luckiest-coder-brainstorming/scripts/stop-server.sh
MediumStructural Risk Force Deep Review
LowWeak Cryptoskills/luckiest-coder-brainstorming/scripts/server.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to luckiest-co@1.0.9.
See all versions of luckiest-co for other recorded verdicts.
- Review the evidence and your use of luckiest-co@1.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.