identify-malicious-repository

What problem does it solve?

It helps you detect fraudulent GitHub repositories that impersonate legitimate security products in order to trick you into downloading malware.

Core Features & Use Cases

• Repository risk detection: Scores likelihood of malicious intent using signals like piracy/cracking language, suspicious engagement patterns, and brand impersonation.
• Actionable warnings and guidance: Produces a risk level plus specific red flags and a clear recommendation not to download.
• Defensive follow-ups: Offers steps for reporting, system scanning, and basic IoC-oriented checks after exposure.

Use case example: You find a newly created “Avast Premium Security” repository with “keygen” style claims and inflated stars but no real engagement; this skill helps you identify it as likely malicious and avoid downloading.

Quick Start

Use the identify-malicious-repository skill to analyze a suspicious GitHub repo and produce a risk level plus concrete red-flag reasons.