Agent skill · security · aradotso
security-risk-awareness
security-risk-awareness — an agent skill for coding agents.
Why this skill is useful
Provides a detailed analysis script for identifying malicious software distribution patterns that the AI wouldn't reliably generate on its own.
What it needs
About 4k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
python def analyzerepositoryrisk(repodata): """ Analyze repository for malware distribution indicators """ riskscore = 0 flags = [] # Check for piracy keywords piracyterms = ['keygen', 'crack', 'serial', 'loader', 'pre-activated', 'activation', 'license key'] descriptionlower = repodata['description'].lower() for term in piracyterms: if term in descriptionlower: riskscore += 15 flags.append(f"Piracy keyword detected: {term}") # Check for commercial software names commercialproducts = ['avast', 'norton', 'kaspersky', 'mcafee', 'bitdefender', 'windows'] for product in commercialproducts: if product in descriptionlower: riskscore += 10 flags.append(f"Commercial product name: {product}") # Check for missing content if not repodata.get('readme'): riskscore += 20 flags.append("No README file") # Check for suspicious star growth daysold = (datetime.now() - repodata['createdat']).days if daysold > 0: starsperday = repodata['stars'] / daysold if starsperday > 2: riskscore += 15 flags.append(f"Suspicious star growth: {starsperday:.1f}/day") # Check for mismatched language/content if repodata['language'] and not repodata.get('sourcefiles'): riskscore += 10 flags.append("Language claimed but no source code") return { 'riskscore': riskscore, 'risklevel': 'CRITICAL' if riskscore > 50 else 'HIGH' if riskscore > 30 else 'MEDIUM' if riskscore > 15 else 'LOW', 'flags': flags, 'recommendation': 'AVOID' if riskscore > 30 else 'CAUTION' } bash ✅ CORRECT: Download from official sources Avast Official Website curl -O https://www.avast.com/download-premium-security ✅ CORRECT: Use official package managers Windows (via Chocolatey) choco install avast-free-antivirus macOS (via Homebrew Cask) brew install --cask avast-security ❌ WRONG: Never download from: GitHub repos claiming "pre-activated" software File sharing sites with "keygens" URLs with multiple redirects Sites requiring surveys before download python import hashlib import requests def verifydownload(filepath, officialhash=None): """ …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/security-risk-awareness