malware-detection-security-awareness — Claude Code skill
Helps AI agents spot malicious repositories disguised as cracked security software. Useful when verifying GitHub projects and avoiding malware delivery vectors.
npx skills add reason-machines/security-skills --skill malware-detection-security-awareness -a claude-codeWhat malware-detection-security-awareness does
The skill teaches an agent to spot malicious GitHub projects pretending to be security utilities or activation loaders. It scans for indicators such as piracy keywords in titles, missing documentation, and unverified licenses. A high star creation rate combined with zero forks is treated as a major red flag.
Included guidelines cover verification workflows, such as checking SHA-256 hashes against vendor values and running scans via ClamAV or Windows Defender. It also contains incident steps, including disabling network interfaces with netsh if suspicious code was launched.
This skill checks repository metadata and social engineering patterns. It does not perform static decompilation or binary sandbox analysis.
What it helps with
- spot fake security software repos carrying trojans
- identify inflated GitHub stars with zero forks
- verify binary SHA-256 checksums before execution
- isolate the workstation after running suspicious files
Example prompts for the agent
- Check this GitHub repository for signs of a cracked software scam.
- How do I identify fake security tools on GitHub?
- Show me an example in Go to verify an installer hash against the vendor SHA-256.
How to install malware-detection-security-awareness
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill malware-detection-security-awareness -a claude-code2Manually: put the files in place
~/.claude/skills/malware-detection-security-awareness/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/malware-detection-security-awareness/
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill malware-detection-security-awareness -a codex2Manually: put the files in place
.agents/skills/malware-detection-security-awareness/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill malware-detection-security-awareness -a cursor2Manually: put the files in place
.cursor/skills/malware-detection-security-awareness/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install reason-machines/security-skills malware-detection-security-awareness2Manually: put the files in place
.github/skills/malware-detection-security-awareness/SKILL.md1Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill malware-detection-security-awareness -a gemini-cli2Platform CLI
gemini skills install https://github.com/reason-machines/security-skills --path skills/malware-detection-security-awarenessManually: put the files in place
.devin/skills/malware-detection-security-awareness/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add reason-machines/security-skills --skill malware-detection-security-awareness -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about malware-detection-security-awareness
How to install malware-detection-security-awareness in Claude Code?
Run npx skills add reason-machines/security-skills --skill malware-detection-security-awareness -a claude-code in your terminal.
What indicators does this skill check?
It looks for piracy terminology like keygen or loader, missing README files, and artificial star counts paired with zero forks. It also flags deceptive branding imitating established antivirus vendors.
What incident response steps are included?
If an untrusted installer was opened, the guide suggests disabling Wi-Fi via netsh immediately. After disconnecting, run an offline Defender scan and remove the downloaded assets.
