skill CX Codex

malware-warning-avast-keygen — Claude Code skill: flagging a fake

Q: How do I install malware-warning-avast-keygen in Claude?

Run `npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a claude-code`. The skill file then sits at `~/.claude/skills/malware-warning-avast-keygen/SKILL.md`.

This skill spots repositories posing as an Avast Premium Security crack or keygen and explains why nothing from them should be run.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a claude-code

Open on GitHub

What malware-warning-avast-keygen does

The skill kicks in when you ask your agent to look at a repo promising a keygen, activation or a pre-activated Avast Premium Security license. It walks through the tells: cracked paid software on offer, no source code despite a claimed language, star counts that look botted, and security topics borrowed to show up in search. The agent won't help build or run anything from it. It tells you what the repo actually is.

From there it points at the alternative: download antivirus from the vendor's own site, install ClamAV with sudo apt install clamav clamav-daemon and sudo freshclam, verify a file with sha256sum. There's a section on reporting the repo to GitHub and to the brand owner, plus commands for checking a machine where the file already ran — running processes, established connections, Windows startup entries, chkrootkit and rkhunter on Linux.

One scenario makes it worth having: a repo like this lands in front of you or a teammate and you need a straight answer instead of a shrug. The skill doesn't scan or clean anything itself. It's a written set of indicators and steps, not an antivirus. If something was already executed, its order of operations is disconnect the network, boot into safe mode, run a full scan with updated definitions, then change passwords from a clean device.

What it helps with

identify a bait repo offering a cracked Avast Premium Security build
explain to a teammate why files from that repo must not be run
check a machine after a suspicious installer was executed
find a legitimate replacement for pirated antivirus software
report the malicious repo to GitHub and to the vendor

Example prompts for the agent

look at this avast keygen repo and tell me what it really is
should I run the installer from this avast premium security repository
I already ran a file from there — what should I check on my machine

How to install malware-warning-avast-keygen

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a claude-code

2Manually: put the files in place

~/.claude/skills/malware-warning-avast-keygen/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/malware-warning-avast-keygen/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a codex

2Manually: put the files in place

.agents/skills/malware-warning-avast-keygen/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a cursor

2Manually: put the files in place

.cursor/skills/malware-warning-avast-keygen/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install reason-machines/security-skills malware-warning-avast-keygen

2Manually: put the files in place

.github/skills/malware-warning-avast-keygen/SKILL.md

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a gemini-cli

2Platform CLI

gemini skills install https://github.com/reason-machines/security-skills --path skills/malware-warning-avast-keygen

Manually: put the files in place

.devin/skills/malware-warning-avast-keygen/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about malware-warning-avast-keygen

How do I install malware-warning-avast-keygen in Claude?

Run npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a claude-code. The skill file then sits at ~/.claude/skills/malware-warning-avast-keygen/SKILL.md.

What does malware-warning-avast-keygen do?

It reviews repositories that claim to be an Avast Premium Security crack or key generator and lists the signs that they aren't. Instead of helping with the install, the agent explains the risk and points to legitimate options.

Does the skill scan files for malware?

No. It's a set of indicators and recovery steps, not a scanner. For actual file checks it refers you to ClamAV and hash comparison.

Similar skills

All skills for Security →

analyzing-linux-elf-malware mahipal A skill that walks an agent through dissecting suspicious Linux ELF binaries: headers, strings, syscalls, Ghidra. Useful when a server or container looks compromised. CX Codex +1 457installs analyzing-network-traffic-of-malware mahipal Walks through a malware PCAP to find C2 protocols, exfiltration channels and payload downloads. Useful for sandbox runs and live incident response. CX Codex +1 413installs ctf-malware ljagiello A skill for analysing malware samples and network traffic in CTF challenges. It covers obfuscated scripts, PE and .NET files, PCAP captures, and C2 protocols. CX Codex +1 8,700installs memory-forensics-volatility yaklang A memory forensics playbook for Volatility 2 and 3: hidden processes, code injection, credential extraction and incident timelines. CX Codex +1 3,600installs deep-analysis cyberkaida A skill for depth-first binary investigation: answers questions like what a function does or whether crypto is involved. CX Codex +1 516installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs

From the same set17

avast-premium-security-malware-analysis A skill for studying Avast Premium Security internals: behavior shield, real-time protection, malware detection. Built for educational and defensive research. CX Codex +1 1,100installs report-malicious-repository Flags repositories that pose as antivirus or other commercial software and walks you through filing a GitHub report. CX Codex +1 1,100installs avast-security-awareness Trains your agent to flag repositories posing as antivirus tools or cracked software, and to warn you before anything gets downloaded. CX Codex +1 1,100installs avast-premium-security-analysis A skill for studying Avast Premium Security components and antivirus protection mechanisms. Useful when you take apart defensive software inside an isolated environment. CX Codex +1 1,100installs security-threat-awareness Flags repositories that disguise malicious downloads as legitimate security tools. Use it before installing software from GitHub. CX Codex +1 1,000installs malware-analysis-dragonflyTomb-avast A skill for pulling apart repositories that pose as antivirus installers. It helps you tell a fake distribution from the real thing. CX Codex +1 1,000installs avast-premium-security-awareness A skill that flags repositories posing as antivirus software while actually pushing malware. CX Codex +1 1,000installs malware-warning-bitdefender-crack Flags repositories that disguise malware as cracked Bitdefender software and helps explain the signals behind the threat. CX Codex +1 971installs