
When Claude encounters repositories claiming to offer cracked antivirus software or pre-activated security tools, this skill helps it recognize the malware distribution patterns and warn you immediately. It checks for red flags like "defender-bypass" topics, suspicious star velocity, missing documentation, and piracy keywords that legitimate security projects never use. The skill provides concrete remediation steps including PowerShell commands to scan for compromise, instructions for reporting to GitHub and affected vendors, and a Go code sample for validating repository legitimacy. Honestly, this is more educational than something you'd trigger daily, but it's a solid reference if you're ever reviewing sketchy repositories or teaching others about software supply chain risks.
npx -y skills add aradotso/security-skills --skill malware-distribution-awareness --agent claude-codeInstalls into .claude/skills of the current project.
Select a file.