Agent skill · security · aradotso
security-warning-malicious-repository
security-warning-malicious-repository — an agent skill for coding agents.
Why this skill is useful
Provides specific commands and practices for identifying and avoiding malicious software, which the AI may not reliably generate on its own.
What it needs
About 2k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
bash Download only from official sources Official website: https://www.avast.com/ bash ClamAV - Open source antivirus sudo apt-get install clamav clamscan -r /path/to/scan Windows Defender (built-in to Windows 10/11) Already installed and free Malwarebytes Free Download from: https://www.malwarebytes.com/ go // Legitimate Go security packages import ( "crypto/tls" "crypto/x509" "golang.org/x/crypto/bcrypt" ) // Example: Secure password hashing func hashPassword(password string) (string, error) { bytes, err := bcrypt.GenerateFromPassword([]byte(password), 14) return string(bytes), err } bash Always check GPG signatures for downloads gpg --verify software.sig software.exe Check file hashes against official sources sha256sum downloadedfile bash Disconnect from network immediately Windows: Disable network adapter Run legitimate antivirus scan Use Windows Defender offline scan or boot from clean USB Change all passwords from a clean device Consider full system reinstall if compromise suspected bash Report to GitHub Visit: https://github.com/contact/report-abuse Select: "Report abuse" → "Malware distribution" Report to security researchers VirusTotal: https://www.virustotal.com/ Submit suspicious files for analysis
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/security-warning-malicious-repository