Skip to main content
affpapa.org
RU EN
skill CX Codex

security-awareness-malicious-repository-detection: Claude Code skill

Flags malicious GitHub repositories pretending to be cracked or pirated software. Helps inspect suspicious code sources before downloading.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add reason-machines/security-skills --skill security-awareness-malicious-repository-detection -a claude-code
Open on GitHub

What security-awareness-malicious-repository-detection does

The skill evaluates GitHub descriptions and repository topics against malware red flags. It looks for piracy terms like keygens or loaders tied to security products. Topic tags mentioning defender bypasses also raise suspicion.

A scoring formula adds risk points for each match. Scoring fifty points or higher flags the project as dangerous. The scanner queries the GitHub repository endpoint directly.

Without a GITHUB_TOKEN environment variable, automated scans quickly hit GitHub rate limits.

What it helps with

  • spot fake software cracks and keygen loaders on GitHub
  • detect manipulated star counts and exploit-related topics
  • calculate a risk score from repository metadata
  • screen suspicious repositories before cloning them locally

Example prompts for the agent

  • Analyze this GitHub project description for crack and malware indicators
  • Check if this repository matches fake software crack patterns
  • Inspect the metadata of this repository to evaluate its risk score

How to install security-awareness-malicious-repository-detection

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill security-awareness-malicious-repository-detection -a claude-code

2Manually: put the files in place

~/.claude/skills/security-awareness-malicious-repository-detection/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/security-awareness-malicious-repository-detection/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about security-awareness-malicious-repository-detection

How to install security-awareness-malicious-repository-detection in Claude Code?

Run npx skills add reason-machines/security-skills --skill security-awareness-malicious-repository-detection -a claude-code.

What does security-awareness-malicious-repository-detection do?

It inspects repository descriptions and topics for piracy lures and exploit terms. Then it computes a risk score to warn you about potential malware.

Do I need an API key to run repository scans?

The scanner code uses the GITHUB_TOKEN environment variable to authenticate requests. Without this token, you quickly hit GitHub's unauthenticated rate limits.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set69

anthropic-cybersecurity-skills A library of 754 structured cybersecurity skills across 26 domains. Useful when your agent works through an incident or hunts for threats. CX Codex +1 1,600installs pentest-agents-bug-bounty-framework A bug bounty testing setup for autonomous vulnerability discovery. It coordinates 50 specialized agents, connects findings into exploit chains, and tracks targets in a local brain. CX Codex +1 1,300installs avast-premium-security-malware-analysis A skill for studying Avast Premium Security internals: behavior shield, real-time protection, malware detection. Built for educational and defensive research. CX Codex +1 1,100installs avast-premium-security-detection This skill reviews suspicious repositories that claim to distribute cracked antivirus software. Use it for an initial malware and source-authenticity check. CX Codex +1 1,100installs wxmini-security-audit This skill inspects decompiled wxapkg bundles for leaked secrets, API endpoints, weak crypto and vulnerabilities. Run it before shipping a mini-program. CX Codex +1 1,100installs unisecurityguard-academic-whistleblower-archive GitHub-based documentation blueprint for academic employment disputes and whistleblowing. It preserves social media evidence against platform censorship. CX Codex +1 1,100installs report-malicious-repository Flags repositories that pose as antivirus or other commercial software and walks you through filing a GitHub report. CX Codex +1 1,100installs avast-security-awareness Trains your agent to flag repositories posing as antivirus tools or cracked software, and to warn you before anything gets downloaded. CX Codex +1 1,100installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor