# avast-premium-security-awareness

A skill that flags repositories posing as antivirus software while actually pushing malware.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 1000 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/avast-premium-security-awareness/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/avast-premium-security-awareness

## What it does

The skill walks through the tells of a fake software distribution channel: promises of cracked or pre-activated commercial software, keyword stuffing, missing source code and README, star counts that grow too fast. It turns those markers into a threat score and tells you whether the repo deserves suspicion.

Inside are C++ examples: a class that scores a description against piracy keywords and regex patterns, a check that compares a download link with a vendor's official domain, and a template for a report you can send to GitHub. There is also a block of environment variables for signature checks and quarantining unknown files.

The skill is built for inspecting someone else's repository, not for cleaning your own machine. If you already ran a file from a source like this, that is a reason to scan the system and rotate saved passwords — the skill does not do either.

## Requirements
- Works with: GitHub

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-premium-security-awareness -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/avast-premium-security-awareness/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/avast-premium-security-awareness/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-premium-security-awareness -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/avast-premium-security-awareness/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-premium-security-awareness -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/avast-premium-security-awareness/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills avast-premium-security-awareness
```

2. **Manually: put the files in place**
- File: `.github/skills/avast-premium-security-awareness/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-premium-security-awareness -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/avast-premium-security-awareness
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/avast-premium-security-awareness/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-premium-security-awareness -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/avast-premium-security-awareness/SKILL.md

## When to use it
- flag a repo that advertises a cracked antivirus
- score a description against keygen and pre-activated keywords
- match a download link to the vendor's official domain
- draft an abuse report for a malicious repository
- tell artificial star growth from real interest

## Example prompts
- check this repository for malware distribution signs
- score the threat level for a description with keygen and pre-activated
- compare this Avast download link with the official source

## Similar
- [saas-security-posture](https://affpapa.org/en/nevibecode/skills/saas-security-posture.md) — skill · 314 installs
- [repo-security-posture](https://affpapa.org/en/nevibecode/skills/repo-security-posture.md) — skill · 853 installs
- [ci-cd-security](https://affpapa.org/en/nevibecode/skills/ci-cd-security.md) — skill · 7900 installs
- [make-repo-contribution](https://affpapa.org/en/nevibecode/skills/make-repo-contribution.md) — skill · 11073 installs
- [dependabot](https://affpapa.org/en/nevibecode/skills/dependabot.md) — skill · 4400 installs
- [secrets-in-git-history](https://affpapa.org/en/nevibecode/skills/secrets-in-git-history.md) — skill · 1900 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 17 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md