Report Malicious Repository

This analyzes GitHub repositories for malware distribution red flags like piracy keywords (keygen, crack, loader), brand impersonation, and suspicious metadata patterns. It includes Go code to scan repo descriptions, calculate risk scores, and generate abuse reports for platforms like GitHub. Useful when you encounter repositories offering "cracked" commercial software or security tools that look too good to be true. The detection logic is straightforward pattern matching, so it won't catch sophisticated attacks, but it'll flag the low effort scams that clutter search results and trick less technical users into downloading actual malware.

Install to Claude Code

npx -y skills add aradotso/security-skills --skill report-malicious-repository --agent claude-code