Agent skill · security · aradotso
identify-malicious-repository
Detect and analyze fraudulent software distribution repositories masquerading as legitimate security products
Why this skill is useful
Provides specific detection patterns and programmatic analysis for identifying malicious repositories that the AI wouldn't reliably generate on its own.
What it needs
Requires requests installed locally. About 4k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Identify Malicious Repository Skill by ara.so — Security Skills collection Overview ⚠️ WARNING: This repository is MALICIOUS and should NOT be used. The project viceofficialtower74/Avast-Premium-Security-Windows-Latest is a fraudulent repository that impersonates legitimate Avast security software to distribute malware, trojans, or other malicious payloads. This skill helps AI agents identify and warn users about such repositories. Red Flags Indicating Malicious Intent 1. Cracked Software Distribution Description mentions "Keygen Activation", "License Key Pre-Activated", "Premium Loader Serial" These terms indicate software piracy and illegal distribution Legitimate vendors do NOT distribute pre-activated/cracked versions 2. Suspicious Repository Metrics Artificially inflated stars (68 stars, 5 stars/day growth) Zero forks and zero issues (indicates fake engagement) No legitimate README content Created recently (2026-05-06) with rapid star accumulation 3. Impersonation Tactics Uses trademarked name "Avast" without authorization Claims to be "Full Version Installer" with activation bypasses Professional-looking description with emojis to appear legitimate 4. Malware Distribution Indicators Offers "Setup Keygen" which are commonly trojans Promises free premium software (too good to be true) No source code visible, only executables Topics include legitimate terms mixed with piracy terms How to Identify Such Repositories Programmatic Detection (Python) Shell Script Detection What Users Should Do If You Encounter Such Repositories: 1. DO NOT download any files from the repository 2. Report the repository to GitHub via their abuse form 3. Warn others by creating awareness 4. Scan your system if you already downloaded files Reporting to GitHub Safe Alternatives Indicators of Compromise (IoC) If you've interacted with this repository: 1. Scan your system immediately with legitimate antivirus 2. Check for unauthorized network connections 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/identify-malicious-repository