Report Malicious Repository
This analyzes GitHub repositories for malware distribution red flags like piracy keywords (keygen, crack, loader), brand impersonation, and suspicious metadata patterns. It includes Go code to scan repo descriptions, calculate risk scores, and generate abuse reports for platforms like GitHub. Useful when you encounter repositories offering "cracked" commercial software or security tools that look too good to be true. The detection logic is straightforward pattern matching, so it won't catch sophisticated attacks, but it'll flag the low effort scams that clutter search results and trick less technical users into downloading actual malware.
- skills.sh installs
- 927
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill report-malicious-repository --agent claude-codeInstalls into .claude/skills of the current project.
Files
Report Malicious Repository
Skill by ara.so — Security Skills collection.
⚠️ WARNING: This Repository is Malicious
The project DragonflyTomb/Avast-Premium-Security-2026 is NOT legitimate software. This is a malicious repository designed to distribute malware, trojans, or phishing attacks by:
- Claiming to offer "cracked" or "pre-activated" commercial software
- Including terms like "keygen", "loader", "serial" in the description
- Impersonating legitimate security software (Avast)
- Using deceptive tactics (fake stars, professional-looking descriptions)
Identifying Malicious Repositories
Red Flags
- Piracy Keywords: keygen, crack, loader, serial, pre-activated, license key
- Too Good to Be True: Free versions of expensive commercial software
- Suspicious Topics: Mixing legitimate topics (retdec) with piracy terms
- No Source Code: Empty or minimal repository with download links
- Recent Creation: New accounts with inflated star counts
- Impersonation: Using brand names (Avast, Norton, etc.) without authorization
Analysis Pattern
package main
import (
"strings"
"regexp"
)
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aradotso/security-skills
- Category
- Security
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Unisecurityguard Academic Whistleblower Archive925
- Wxmini Security Audit919
- Avast Premium Security Detection918
- Security Awareness Malicious Repository Detection909
- Avast Premium Security Malware Analysis905
- Avast Premium Security Awareness898
- Avast Security Analysis897
- Openclaw Security Watchdog856
- Security Threat Awareness852
- Malware Analysis DragonflyTomb Avast851
- Avast Premium Security Malware Detection837
- Mcp Security Hub827
- Identify Malicious Repository823
- Bitdefender Total Security Malware Analysis817
- Malware Warning Bitdefender Crack817
- Bitdefender Total Security Awareness799
- Malware Detection And Removal796
- Malware Detection Security Awareness777
- Dragonjar Android Pentesting Skill775
- Npm Security Best Practices770
- Malware Awareness Bitdefender Crack Fraud767
- Security Detections Mcp754
- Malware Repository Warning748
- Malware Detection And Reporting747
Recommended
More Security
unisecurityguard-academic-whistleblower-archivearadotso/security-skillsunisecurityguard academic whistleblower archive925skills.sh installs
clawsec-suiteprompt-security/clawsecClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup fo875skills.sh installsmalware-analysis-dragonflyTomb-avastaradotso/security-skillsmalware analysis dragonflytomb avast851skills.sh installs
linux-administrationbagelhole/devops-security-agent-skillsSystem administration for Linux servers. Manage packages, services, and system configuration. Use when administering Linux systems.833skills.sh installsidentify-malicious-repositoryaradotso/security-skillsidentify malicious repository823skills.sh installsmalware-warning-bitdefender-crackaradotso/security-skillsmalware warning bitdefender crack817skills.sh installs