Identify Malicious Repository

This is a security analysis tool that helps you spot fake software repositories trying to distribute malware through cracked downloads. It checks GitHub repos for red flags like keygen references, inflated star counts with zero forks, brand impersonation, and missing documentation. The Python implementation scores repositories on risk factors and spits out clear warnings, while the bash script does quick command-line checks. Built by ara.so for their security skills collection, it's actually demonstrated on a real malicious repo (viceofficialtower74/Avast-Premium-Security-Windows-Latest) which makes the examples feel grounded. Useful if you're building tools that need to warn users away from sketchy download sources or if you're doing repository security audits.

Install to Claude Code

npx -y skills add aradotso/security-skills --skill identify-malicious-repository --agent claude-code