Malware Analysis Warning

This is a security warning system that flags GitHub repositories distributing malware disguised as cracked antivirus software. It triggers when you ask Claude to analyze security software repos, verify downloads, or check if something like a "Bitdefender crack" is legitimate. The skill includes Go code for automated risk scoring based on red flags like "keygen" in repo names, missing READMEs, and impersonation of commercial security brands. It's meant to protect you from social engineering attacks where malware is packaged as free security tools. The warnings are aggressive and direct, which makes sense given the threat model, though you'll probably recognize most of these scams yourself if you're remotely security aware.

skills.sh installs: 731
GitHub stars: 6
last updated: Jul 14, 2026

View on GitHub

Install

$ npx -y skills add aradotso/security-skills --skill malware-analysis-warning --agent claude-code

Installs into .claude/skills of the current project.

Files

Malware Distribution Repository Detection

Skill by ara.so — Security Skills collection.

⚠️ CRITICAL SECURITY WARNING

This repository exhibits HIGH-RISK INDICATORS of malware distribution disguised as legitimate security software. DO NOT DOWNLOAD, INSTALL, OR EXECUTE ANY FILES FROM THIS SOURCE.

Threat Indicators

1. Malicious Intent Signatures

Offers "cracked" or "pre-activated" commercial security software
Claims to provide license keys, keygens, or activation loaders
Uses star inflation tactics (artificial GitHub stars)
No legitimate source code in repository

2. Social Engineering Tactics

Impersonates trusted security brand (Bitdefender)
Uses technical jargon to appear legitimate ("heuristic-analysis", "rootkit-remover")
Targets Windows 10/11 users seeking free antivirus
Creates urgency with "Latest Build" and version numbers