Agent skill · security · aradotso
security-awareness-malware-identification
security-awareness-malware-identification — an agent skill for coding agents.
Why this skill is useful
Provides specific patterns and code snippets for identifying malicious software repositories that the AI wouldn't reliably generate on its own.
What it needs
About 3k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
go // Common malware repo indicators type MalwareIndicators struct { HasCrackKeywords bool // "crack", "keygen", "pre-activated" MissingSourceCode bool // No actual implementation SuspiciousTopics []string // Security bypass terms ArtificialStars bool // Unusual star velocity NoLicense bool // "NOASSERTION" or missing DownloadLinks bool // External file hosting } func AnalyzeRepo(repo Repository) bool { indicators := MalwareIndicators{ HasCrackKeywords: containsKeywords(repo.Description, []string{"crack", "keygen", "pre-activated", "loader"}), MissingSourceCode: len(repo.SourceFiles) == 0, SuspiciousTopics: findSuspiciousTopics(repo.Topics), NoLicense: repo.License == "NOASSERTION", } riskScore := calculateRisk(indicators) return riskScore > MALWARETHRESHOLD } go package main import ( "strings" "regexp" ) // Malware distribution red flags var RedFlags = []string{ "crack", "keygen", "loader", "activator", "pre-activated", "full version", "license key", "bypass", "patch", "serial", } func IsSuspiciousRepo(description, readme string, topics []string) bool { score := 0 // Check description for crack keywords desc := strings.ToLower(description) for , flag := range RedFlags { if strings.Contains(desc, flag) { score += 3 } } // Empty or missing README if len(readme) < 100 { score += 2 } // Security bypass topics bypassTopics := []string{"defender-bypass", "exploit-mitigation", "thread-hijacking"} for , topic := range topics { for , bypass := range bypassTopics { if topic == bypass { score += 2 } } } return score >= 5 } go // Legitimate antivirus options type SecuritySoftware struct { Name string FreeTier bool OpenSource bool URL string } var LegitimateOptions = []SecuritySoftware{ {Name: "Windows Defender", FreeTier: true, OpenSource: false, URL: "built-in"}, {Name: "ClamAV", FreeTier: true, OpenSource: true, URL: "https://www.clamav.net/"}, {Name: "Bitdefender Free", FreeTier: true, OpenSource: false, URL: "https://www.bitdefender.com/"}, } bash Use official package mana …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/security-awareness-malware-identification