Agent skill · security · aradotso
malware-detection-warning
malware-detection-warning — an agent skill for coding agents.
Why this skill is useful
Provides detailed indicators and scripts for detecting and responding to malicious software distribution attempts that the AI wouldn't reliably generate on its own.
What it needs
About 3k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
bash Visit official Bitdefender website only https://www.bitdefender.com Use official package managers (example for Linux) sudo apt-get install bitdefender-endpoint-security-tools For Windows, download from official site only Verify digital signatures on all installers bash Immediately disconnect from network Run full system scan with known-good antivirus from bootable media Check for persistence mechanisms (Windows) Review scheduled tasks schtasks /query /fo LIST /v Check startup items wmic startup get caption,command Review services sc query state=all Linux/Mac - check cron jobs crontab -l sudo crontab -l Check for suspicious processes ps aux grep -i "bitdefender\ crack\ loader" yaml suspiciousindicators: naming: Contains "crack", "keygen", "loader", "activated" Year in future (2026) Legitimate company name + crack description: Excessive emojis and promotional language Claims of "full version" or "pre-activated" Lists multiple OS versions repositorymetadata: No meaningful code visible Missing or minimal README Suspicious topic tags Recent creation with artificial engagement technicalflags: Topics include "bypass" or "hijacking" Language doesn't match purpose (Go for Windows security?) Zero forks despite stars go package main import ( "regexp" "strings" ) type ThreatIndicators struct { SuspiciousKeywords []string Score int } func AnalyzeRepository(name, description string, topics []string) ThreatIndicators { indicators := ThreatIndicators{ SuspiciousKeywords: []string{}, Score: 0, } // Check for crack-related terms crackTerms := []string{"crack", "keygen", "loader", "activated", "pre-activated", "bypass"} for , term := range crackTerms { if strings.Contains(strings.ToLower(name), term) strings.Contains(strings.ToLower(description), term) { indicators.SuspiciousKeywords = append(indicators.SuspiciousKeywords, term) indicators.Score += 25 } } // Check for malicious technique topics maliciousTopics := []string{"bypass", "hijacking", "exploit"} for , topic := range top …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/malware-detection-warning