bitdefender-total-security-malware-analysis — Claude Code skill
Teaches coding agents to spot fraudulent repositories peddling fake software cracks and study typical malware distribution tactics.
npx skills add reason-machines/security-skills --skill bitdefender-total-security-malware-analysis -a claude-codeWhat bitdefender-total-security-malware-analysis does
This skill focuses on deceptive projects that impersonate commercial software like Bitdefender. Fraudulent repositories lure users with promises of pre-activated binaries, yet publish links to stealers and backdoors. The repository itself stays empty or contains minimal filler files.
Detection heuristics inside use Go snippets to assess public projects. The logic flags star growth exceeding 2.0 per day and scans descriptions for keywords like keygen or bypass. For local binaries, it outlines SHA-256 hashing alongside process monitoring.
Querying external signature databases through VirusTotal requires setting the VIRUSTOTAL_API_KEY environment variable. Without that token, automated hash lookups will fail.
What it helps with
- spot fake GitHub repositories advertising cracked security software
- compute SHA-256 checksums to verify suspicious binary files
- identify behavioral red flags in processes modifying system registries
Example prompts for the agent
- Inspect this cracked software repository for signs of malware distribution
- Calculate the SHA-256 hash for this executable and explain how to query VirusTotal
- Summarize common behavioral indicators of credential stealer payloads
How to install bitdefender-total-security-malware-analysis
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill bitdefender-total-security-malware-analysis -a claude-code2Manually: put the files in place
~/.claude/skills/bitdefender-total-security-malware-analysis/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/bitdefender-total-security-malware-analysis/
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill bitdefender-total-security-malware-analysis -a codex2Manually: put the files in place
.agents/skills/bitdefender-total-security-malware-analysis/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill bitdefender-total-security-malware-analysis -a cursor2Manually: put the files in place
.cursor/skills/bitdefender-total-security-malware-analysis/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install reason-machines/security-skills bitdefender-total-security-malware-analysis2Manually: put the files in place
.github/skills/bitdefender-total-security-malware-analysis/SKILL.md1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill bitdefender-total-security-malware-analysis -a gemini-cli2Platform CLI
gemini skills install https://github.com/reason-machines/security-skills --path skills/bitdefender-total-security-malware-analysisManually: put the files in place
.devin/skills/bitdefender-total-security-malware-analysis/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill bitdefender-total-security-malware-analysis -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about bitdefender-total-security-malware-analysis
How do I install bitdefender-total-security-malware-analysis in Claude Code?
Run npx skills add reason-machines/security-skills --skill bitdefender-total-security-malware-analysis -a claude-code. The skill will be installed to ~/.claude/skills/bitdefender-total-security-malware-analysis/SKILL.md.
What does bitdefender-total-security-malware-analysis do?
It provides heuristics and analysis patterns to detect fake software cracks on GitHub, evaluate file hashes, and spot suspicious process behaviors.
Is an API key required to look up file hashes?
Yes, querying VirusTotal requires an active key stored in the VIRUSTOTAL_API_KEY environment variable.