Identify Malicious Repository
This is a security analysis tool that helps you spot fake software repositories trying to distribute malware through cracked downloads. It checks GitHub repos for red flags like keygen references, inflated star counts with zero forks, brand impersonation, and missing documentation. The Python implementation scores repositories on risk factors and spits out clear warnings, while the bash script does quick command-line checks. Built by ara.so for their security skills collection, it's actually demonstrated on a real malicious repo (viceofficialtower74/Avast-Premium-Security-Windows-Latest) which makes the examples feel grounded. Useful if you're building tools that need to warn users away from sketchy download sources or if you're doing repository security audits.
- skills.sh installs
- 823
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill identify-malicious-repository --agent claude-codeInstalls into .claude/skills of the current project.
Files
Identify Malicious Repository
Skill by ara.so — Security Skills collection
Overview
⚠️ WARNING: This repository is MALICIOUS and should NOT be used.
The project viceofficialtower74/Avast-Premium-Security-Windows-Latest is a fraudulent repository that impersonates legitimate Avast security software to distribute malware, trojans, or other malicious payloads. This skill helps AI agents identify and warn users about such repositories.
Red Flags Indicating Malicious Intent
1. Cracked Software Distribution
- Description mentions "Keygen Activation", "License Key Pre-Activated", "Premium Loader Serial"
- These terms indicate software piracy and illegal distribution
- Legitimate vendors do NOT distribute pre-activated/cracked versions
2. Suspicious Repository Metrics
- Artificially inflated stars (68 stars, 5 stars/day growth)
- Zero forks and zero issues (indicates fake engagement)
- No legitimate README content
- Created recently (2026-05-06) with rapid star accumulation
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aradotso/security-skills
- Category
- Security
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Bitdefender Total Security Malware Analysis817
- Malware Warning Bitdefender Crack817
- Bitdefender Total Security Awareness799
- Malware Detection And Removal796
- Malware Detection Security Awareness777
- Dragonjar Android Pentesting Skill775
- Npm Security Best Practices770
- Malware Awareness Bitdefender Crack Fraud767
- Security Detections Mcp754
- Malware Repository Warning748
- Malware Detection And Reporting747
- Malware Analysis Warning731
- Malware Distribution Awareness717
- Kali Pentest Ai Agent697
- Bitdefender Malware Analysis686
- Skill File Security681
- Bitdefender Malware Investigation677
- Zen Ai Pentest Framework676
- Edgesecurityaccess Wireguard Vpn670
- Sparkfinderoven Security Compliance Skills661
- Securityclaw Autonomous Soc Agent659
- Security Compliance Skills Suite Claude652
- Pentestify Security Report Generator639
- Awesome Claude Code Security Compliance Suite633
Recommended
More Security
malware-warning-bitdefender-crackaradotso/security-skillsmalware warning bitdefender crack817skills.sh installsmalware-detection-and-removalaradotso/security-skillsmalware detection and removal796skills.sh installsdragonjar-android-pentesting-skillaradotso/security-skillsdragonjar android pentesting skill775skills.sh installsmalware-awareness-bitdefender-crack-fraudaradotso/security-skillsmalware awareness bitdefender crack fraud767skills.sh installs
openclaw-audit-watchdogprompt-security/clawsecAutomated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, an754skills.sh installs