# malware-warning-avast-keygen This skill spots repositories posing as an Avast Premium Security crack or keygen and explains why nothing from them should be run. - skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 1100 installs · ★ 12 - Author: reason-machines - License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author - Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/malware-warning-avast-keygen/SKILL.md - Updated: 2026-10-09 - HTML: https://affpapa.org/en/nevibecode/skills/malware-warning-avast-keygen ## What it does The skill kicks in when you ask your agent to look at a repo promising a keygen, activation or a pre-activated Avast Premium Security license. It walks through the tells: cracked paid software on offer, no source code despite a claimed language, star counts that look botted, and security topics borrowed to show up in search. The agent won't help build or run anything from it. It tells you what the repo actually is. From there it points at the alternative: download antivirus from the vendor's own site, install ClamAV with `sudo apt install clamav clamav-daemon` and `sudo freshclam`, verify a file with `sha256sum`. There's a section on reporting the repo to GitHub and to the brand owner, plus commands for checking a machine where the file already ran — running processes, established connections, Windows startup entries, `chkrootkit` and `rkhunter` on Linux. One scenario makes it worth having: a repo like this lands in front of you or a teammate and you need a straight answer instead of a shrug. The skill doesn't scan or clean anything itself. It's a written set of indicators and steps, not an antivirus. If something was already executed, its order of operations is disconnect the network, boot into safe mode, run a full scan with updated definitions, then change passwords from a clean device. ## Install ### Claude Code (native platform) 1. **Skills CLI (Vercel)** ```bash npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a claude-code ``` 2. **Manually: put the files in place** - File: `~/.claude/skills/malware-warning-avast-keygen/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/malware-warning-avast-keygen/ ### Codex 1. **Skills CLI (Vercel)** ```bash npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a codex ``` 2. **Manually: put the files in place** - File: `.agents/skills/malware-warning-avast-keygen/SKILL.md` — For all projects use ~/.agents/skills/ ### Cursor 1. **Skills CLI (Vercel)** ```bash npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a cursor ``` 2. **Manually: put the files in place** - File: `.cursor/skills/malware-warning-avast-keygen/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/ ### GitHub Copilot 1. **GitHub CLI** ```bash gh skill install reason-machines/security-skills malware-warning-avast-keygen ``` 2. **Manually: put the files in place** - File: `.github/skills/malware-warning-avast-keygen/SKILL.md` ### Gemini CLI 1. **Skills CLI (Vercel)** ```bash npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a gemini-cli ``` 2. **Platform CLI** ```bash gemini skills install https://github.com/reason-machines/security-skills --path skills/malware-warning-avast-keygen ``` ### Windsurf (Devin Desktop) **Manually: put the files in place** - File: `.devin/skills/malware-warning-avast-keygen/SKILL.md` — The legacy .windsurf/skills/ path still works ### OpenCode **Skills CLI (Vercel)** ```bash npx skills add reason-machines/security-skills --skill malware-warning-avast-keygen -a opencode ``` ### Claude.ai **Claude.ai** - Zip the folder and upload it in Settings → Capabilities → Skills Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/malware-warning-avast-keygen/SKILL.md ## When to use it - identify a bait repo offering a cracked Avast Premium Security build - explain to a teammate why files from that repo must not be run - check a machine after a suspicious installer was executed - find a legitimate replacement for pirated antivirus software - report the malicious repo to GitHub and to the vendor ## Example prompts - look at this avast keygen repo and tell me what it really is - should I run the installer from this avast premium security repository - I already ran a file from there — what should I check on my machine ## Similar - [analyzing-linux-elf-malware](https://affpapa.org/en/nevibecode/skills/analyzing-linux-elf-malware.md) — skill · 457 installs - [analyzing-network-traffic-of-malware](https://affpapa.org/en/nevibecode/skills/analyzing-network-traffic-of-malware.md) — skill · 413 installs - [ctf-malware](https://affpapa.org/en/nevibecode/skills/ctf-malware.md) — skill · 8700 installs - [memory-forensics-volatility](https://affpapa.org/en/nevibecode/skills/memory-forensics-volatility.md) — skill · 3600 installs - [deep-analysis](https://affpapa.org/en/nevibecode/skills/deep-analysis.md) — skill · 516 installs - [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs - [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs - [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 17 cards --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md