Agent skill · security · aradotso
malware-distribution-warning
malware-distribution-warning — an agent skill for coding agents.
Why this skill is useful
Provides specific detection patterns and analysis frameworks for identifying malware distribution repositories that the AI wouldn't reliably generate on its own.
What it needs
About 3k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
go // Pattern for identifying malware distribution repos type MalwareRepoIndicators struct { SuspiciousKeywords []string RedFlags []string } var indicators = MalwareRepoIndicators{ SuspiciousKeywords: []string{ "crack", "keygen", "loader", "pre-activated", "bypass", "full version", "license key", }, RedFlags: []string{ "defender-bypass", "thread-hijacking", "No README with actual documentation", "Stars inconsistent with age/content", "Security software + crack combination", }, } go // Security analysis framework func AnalyzeRepository(repo Repository) ThreatAssessment { assessment := ThreatAssessment{} // Check for crack/piracy indicators if ContainsPiracyKeywords(repo.Description) { assessment.ThreatLevel = "HIGH" assessment.Risks = append(assessment.Risks, "Piracy/Malware Distribution") } // Verify code legitimacy if repo.README == "" len(repo.SourceFiles) == 0 { assessment.Risks = append(assessment.Risks, "No Legitimate Code") } // Check for contradictory purposes if ContainsSecurityTopics(repo) && ContainsBypassTopics(repo) { assessment.Risks = append(assessment.Risks, "Contradictory Intent") } return assessment } bash Report malicious repository gh api \ --method POST \ -H "Accept: application/vnd.github+json" \ /repos/OWNER/REPO/report \ -f reason='malware distribution' \ -f details='Repository distributes malware disguised as Bitdefender cracks' bash Immediate actions (Linux/macOS) 1. Disconnect from network sudo ifconfig en0 down 2. Identify suspicious processes ps aux grep -E "(bitdefender crack keygen loader)" 3. Check for persistence mechanisms crontab -l launchctl list grep -v com.apple 4. Scan with legitimate tools Use actual antivirus from official sources Examples: Malwarebytes, official Bitdefender, ClamAV powershell Windows remediation 1. Disconnect network Disable-NetAdapter -Name "Ethernet" -Confirm:$false 2. Check running processes Get-Process Where-Object {$.ProcessName -match "bitdefender crack keygen loader"} 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/malware-distribution-warning