skill CX Codex

avast-premium-security-malware-detection — Claude Code skill

Q: How do I install avast-premium-security-malware-detection in Claude Code?

Run `npx skills add reason-machines/security-skills --skill avast-premium-security-malware-detection -a claude-code`. The skill lands in `~/.claude/skills/avast-premium-security-malware-detection/SKILL.md`.

This skill inspects suspicious repositories posing as antivirus installers and points out where malware distribution starts.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add reason-machines/security-skills --skill avast-premium-security-malware-detection -a claude-code

Open on GitHub

What avast-premium-security-malware-detection does

The skill reads repository metadata and looks for fakery: words like “keygen”, “crack” or “pre-activated” in the description, stars with no forks or issues, a popular project with no README, a creation date in the future. Three or more suspicious terms in a description is a signal that this is not an Avast build.

Content analysis comes next. The skill walks the file tree and collects executables by extension — .exe, .dll, .bat, .cmd, .ps1, .vbs, .js, .scr, .com. A table of official sources maps a product name to its vendor domain, so an “avast” link hosted somewhere else fails the check. There is also a template for a GitHub abuse report.

This is not an antivirus and it never runs what it finds. It works from metadata and filenames, so an obfuscated binary inside an archive stays invisible to it — that file belongs in a sandbox, not on your machine.

What it helps with

tell a fake “crack” repo from a real vendor build
list executable files in someone else's project before building
match a download link against the vendor's official domain
gather evidence for a GitHub abuse report
check whether an activator is being passed off as antivirus software

Example prompts for the agent

Analyze this repository for malware distribution
Is this a legitimate Avast download or a fake?
Find .exe and .dll files in this project and tell me how suspicious they look

How to install avast-premium-security-malware-detection

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill avast-premium-security-malware-detection -a claude-code

2Manually: put the files in place

~/.claude/skills/avast-premium-security-malware-detection/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/avast-premium-security-malware-detection/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill avast-premium-security-malware-detection -a codex

2Manually: put the files in place

.agents/skills/avast-premium-security-malware-detection/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill avast-premium-security-malware-detection -a cursor

2Manually: put the files in place

.cursor/skills/avast-premium-security-malware-detection/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install reason-machines/security-skills avast-premium-security-malware-detection

2Manually: put the files in place

.github/skills/avast-premium-security-malware-detection/SKILL.md

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill avast-premium-security-malware-detection -a gemini-cli

2Platform CLI

gemini skills install https://github.com/reason-machines/security-skills --path skills/avast-premium-security-malware-detection

Manually: put the files in place

.devin/skills/avast-premium-security-malware-detection/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill avast-premium-security-malware-detection -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about avast-premium-security-malware-detection

How do I install avast-premium-security-malware-detection in Claude Code?

Run npx skills add reason-machines/security-skills --skill avast-premium-security-malware-detection -a claude-code. The skill lands in ~/.claude/skills/avast-premium-security-malware-detection/SKILL.md.

What does avast-premium-security-malware-detection do?

It flags repositories that look like pirated software or malware dressed up as an antivirus: suspicious description keywords, artificial engagement metrics, executable files and links to unofficial sources.

Does the skill scan files with an antivirus engine?

No. It works from metadata, file extensions and source URLs, so any binary it surfaces still needs a separate check.

Similar skills

All skills for Security →

git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set24

vibe-security-skill Audits code written with an AI assistant for the usual holes: exposed keys, broken RLS policies, weak auth. CX Codex +1 1,100installs security-threat-awareness Flags repositories that disguise malicious downloads as legitimate security tools. Use it before installing software from GitHub. CX Codex +1 1,000installs malware-analysis-dragonflyTomb-avast A skill for pulling apart repositories that pose as antivirus installers. It helps you tell a fake distribution from the real thing. CX Codex +1 1,000installs avast-premium-security-awareness A skill that flags repositories posing as antivirus software while actually pushing malware. CX Codex +1 1,000installs mcp-security-hub This skill spins up 38 Dockerized MCP servers for offensive security tooling and wires them into an AI assistant. CX Codex +1 987installs malware-warning-bitdefender-crack Flags repositories that disguise malware as cracked Bitdefender software and helps explain the signals behind the threat. CX Codex +1 971installs malware-detection-and-removal A skill for spotting repositories that pose as cracked software and deciding what to do about them. CX Codex +1 952installs npm-security-best-practices Guides npm dependency hardening, supply-chain attack prevention, and safer package-manager settings. Useful when reviewing Node.js installs. CX Codex +1 919installs