
This teaches you to spot malware distribution patterns on GitHub and other platforms, focusing on red flags like "pre-activated" software claims, keygens, and suspicious repository metrics. You get Go code examples for programmatic risk assessment, checklists for verifying legitimate software sources, and incident response steps if you've been exposed. The skill uses a fake Avast Premium Security repository as a case study to demonstrate indicators like trademark abuse, empty repos with inflated stars, and activation bypass claims. Honestly more educational than practical for everyday coding, but valuable if you're building security tooling or need to train a team on identifying sketchy software distributions.
npx -y skills add aradotso/security-skills --skill malware-detection-awareness --agent claude-codeInstalls into .claude/skills of the current project.
Select a file.