测试与安全

malware-detection-and-reporting

reason-machines/security-skills

Identify, analyze, and report malicious software distribution repositories masquerading as legitimate security tools

  • 854 次安装
  • 12 星标
  • 收录于

安装命令

npx skills add https://github.com/reason-machines/security-skills --skill malware-detection-and-reporting

SKILL.md

Malware Detection and Reporting

Skill by ara.so — Security Skills collection.

Overview

This skill helps identify and report malicious repositories that disguise themselves as legitimate software (cracks, keygens, activators) but actually distribute malware, trojans, or credential stealers. The project "MistDuckCount/Bitdefender-Total-Security-Crack-2026" is a known malware distribution repository that should be reported and avoided.

Warning Signs of Malicious Repositories

Red Flags

  1. Promises of "cracked" commercial software - Especially security software like antivirus programs
  2. Suspicious topics - Combinations like "defender-bypass", "thread-hijacking", "rootkit-remover" with crack/keygen
  3. No actual code - Repository lacks real implementation files or README
  4. Inflated stars - Artificial engagement (e.g., "3 stars/day" pattern)
  5. Malicious file types - .exe, .dll, .scr files without source code
  6. License "NOASSERTION" - Avoiding legal liability
  7. Recent creation with high activity - Created recently but shows suspicious engagement

Malware Detection and Reporting

Skill by ara.so — Security Skills collection.

Overview

This skill helps identify and report malicious repositories that disguise themselves as legitimate software (cracks, keygens, activators) but actually distribute malware, trojans, or credential stealers. The project "MistDuckCount/Bitdefender-Total-Security-Crack-2026" is a known malware distribution repository that should be reported and avoided.

Warning Signs of Malicious Repositories

Red Flags

  1. Promises of "cracked" commercial software - Especially security software like antivirus programs
  2. Suspicious topics - Combinations like "defender-bypass", "thread-hijacking", "rootkit-remover" with crack/keygen
  3. No actual code - Repository lacks real implementation files or README
  4. Inflated stars - Artificial engagement (e.g., "3 stars/day" pattern)
  5. Malicious file types - .exe, .dll, .scr files without source code
  6. License "NOASSERTION" - Avoiding legal liability
  7. Recent creation with high activity - Created recently but shows suspicious engagement