Security Awareness Malicious Repository Detection
This teaches Claude to spot malware repos disguised as software cracks by analyzing repo metadata for red flags. It includes Go code that scores repositories based on suspicious keywords (crack, keygen, pre-activated), exploit terminology (defender-bypass, thread-hijacking), and the dangerous combo of legitimate security vendor names plus piracy terms. The detection logic is straightforward: anything scoring 50+ risk points gets flagged. Honestly most useful as a reference implementation if you're building automated scanning tools or want to understand common malware distribution patterns on GitHub. The specific example it analyzes (a fake Bitdefender crack repo) drives home how these attacks work through social engineering rather than technical sophistication.
- skills.sh installs
- 909
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill security-awareness-malicious-repository-detection --agent claude-codeInstalls into .claude/skills of the current project.
Files
Security Awareness: Malicious Repository Detection
Skill by ara.so — Security Skills collection.
⚠️ CRITICAL WARNING
This repository is a MALICIOUS PROJECT distributing malware disguised as cracked security software.
Threat Indicators Present
- Impersonation: Claims to be "Bitdefender Total Security Crack" - legitimate security vendors do not distribute cracks
- Suspicious Topics: Includes "defender-bypass", "thread-hijacking", "exploit-mitigation" alongside crack-related terms
- Star Manipulation: 59 stars at 3 stars/day suggests artificial inflation
- No Legitimate Code: No README, likely contains payload downloaders
- Red Flag Language: "Pre-Activated", "Keygen Loader", "Crack" combined with antivirus software
- Future Dating: Created date shows 2026 (timestamp manipulation or test data)
What This Actually Is
This is a malware distribution vector using common social engineering tactics:
- Lure: Free premium security software
- Method: Fake crack/keygen
- Payload: Likely infostealers, ransomware, or backdoors
- Target: Users searching for pirated antivirus software
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aradotso/security-skills
- Category
- Security
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Avast Premium Security Malware Analysis905
- Avast Premium Security Awareness898
- Avast Security Analysis897
- Openclaw Security Watchdog856
- Security Threat Awareness852
- Malware Analysis DragonflyTomb Avast851
- Avast Premium Security Malware Detection837
- Mcp Security Hub827
- Identify Malicious Repository823
- Bitdefender Total Security Malware Analysis817
- Malware Warning Bitdefender Crack817
- Bitdefender Total Security Awareness799
- Malware Detection And Removal796
- Malware Detection Security Awareness777
- Dragonjar Android Pentesting Skill775
- Npm Security Best Practices770
- Malware Awareness Bitdefender Crack Fraud767
- Security Detections Mcp754
- Malware Repository Warning748
- Malware Detection And Reporting747
- Malware Analysis Warning731
- Malware Distribution Awareness717
- Kali Pentest Ai Agent697
- Bitdefender Malware Analysis686
Recommended
More Security
avast-premium-security-malware-analysisaradotso/security-skillsavast premium security malware analysis905skills.sh installsavast-premium-security-awarenessaradotso/security-skillsavast premium security awareness898skills.sh installs
information-security-manager-iso27001alirezarezvani/claude-skillsISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use when designing an ISMS, running security risk assessments, 875skills.sh installs