skill CX Codex

malware-detection-awareness — Claude Code skill: install guide

Q: How do I install malware-detection-awareness in Claude Code?

Run `npx skills add reason-machines/security-skills --skill malware-detection-awareness -a claude-code`. You can also save the definition directly to `~/.claude/skills/malware-detection-awareness/SKILL.md`.

Q: Does this skill require external API credentials?

The URL scanning routine relies on the `VIRUSTOTAL_API_KEY` environment variable. Remote threat database queries fail without this token.

Helps spot malicious repositories, trojanized software packages, and pirated installers. Useful when vetting untrusted code sources.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add reason-machines/security-skills --skill malware-detection-awareness -a claude-code

Open on GitHub

What malware-detection-awareness does

This skill teaches coding agents to spot unsafe software distribution patterns. It protects against malicious packages.

The rules highlight warning signs like artificial star counts on empty repositories or claims of pre-activated commercial software. Sample Go snippets demonstrate how to parse repository descriptions for forbidden terms like keygen.

Other sections cover Authenticode signature verification and Linux containment steps. Remote URL scanning depends on VIRUSTOTAL_API_KEY. Without that variable, network lookups will fail.

What it helps with

spot fake or compromised open-source repositories
audit software packages for trademark abuse and activation cracks
verify digital signatures on Windows installers
run emergency containment commands on an infected host

Example prompts for the agent

What signs indicate that this software repository might be distributing malware?
Show me how to verify the Authenticode signature of an installer executable.
Which Linux commands should I run first if a suspicious binary was executed?

How to install malware-detection-awareness

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-detection-awareness -a claude-code

2Manually: put the files in place

~/.claude/skills/malware-detection-awareness/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/malware-detection-awareness/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-detection-awareness -a codex

2Manually: put the files in place

.agents/skills/malware-detection-awareness/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-detection-awareness -a cursor

2Manually: put the files in place

.cursor/skills/malware-detection-awareness/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install reason-machines/security-skills malware-detection-awareness

2Manually: put the files in place

.github/skills/malware-detection-awareness/SKILL.md

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-detection-awareness -a gemini-cli

2Platform CLI

gemini skills install https://github.com/reason-machines/security-skills --path skills/malware-detection-awareness

Manually: put the files in place

.devin/skills/malware-detection-awareness/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-detection-awareness -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about malware-detection-awareness

How do I install malware-detection-awareness in Claude Code?

Run npx skills add reason-machines/security-skills --skill malware-detection-awareness -a claude-code. You can also save the definition directly to ~/.claude/skills/malware-detection-awareness/SKILL.md.

What does malware-detection-awareness do?

It provides threat indicators and code patterns for identifying malicious software downloads. It also outlines incident response steps for suspicious systems.

Does this skill require external API credentials?

The URL scanning routine relies on the VIRUSTOTAL_API_KEY environment variable. Remote threat database queries fail without this token.

Similar skills

All skills for Security →

git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set69

avast-security-awareness Trains your agent to flag repositories posing as antivirus tools or cracked software, and to warn you before anything gets downloaded. CX Codex +1 1,100installs palisade-security-nexus-bitdefender Deploys BitDefender Total Security 2026, manages sandboxed execution, and controls firewall policies. Useful for workstation and server defense. CX Codex +1 1,100installs avast-premium-security-analysis A skill for studying Avast Premium Security components and antivirus protection mechanisms. Useful when you take apart defensive software inside an isolated environment. CX Codex +1 1,100installs malware-warning-avast-keygen This skill spots repositories posing as an Avast Premium Security crack or keygen and explains why nothing from them should be run. CX Codex +1 1,100installs autopentestx-automated-pentesting This skill automates reconnaissance, vulnerability checks, and security reports. Use it to assess hosts, target lists, and web applications. CX Codex +1 1,100installs vibe-security-skill Audits code written with an AI assistant for the usual holes: exposed keys, broken RLS policies, weak auth. CX Codex +1 1,100installs security-threat-awareness Flags repositories that disguise malicious downloads as legitimate security tools. Use it before installing software from GitHub. CX Codex +1 1,000installs malware-analysis-dragonflyTomb-avast A skill for pulling apart repositories that pose as antivirus installers. It helps you tell a fake distribution from the real thing. CX Codex +1 1,000installs