skills.rest
w33ts
w33tsCOMMUNITY
Explore all skills by this author →
Website𝕏@w33t_ioGitHub

virustotal-api

Query VirusTotal API v3 for file, URL, and domain threat intelligence.

2|Updated Mar 11, 2026
Search Tags:#api#scanning#threat intelligence#ioc#virustotal#malware analysis
One-click install
npx skills add https://github.com/w33ts/virustotal-api-skill --skill virustotal-api
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: virustotal-api
Source: https://github.com/w33ts/virustotal-api-skill/tree/main
Command: npx skills add https://github.com/w33ts/virustotal-api-skill --skill virustotal-api

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides comprehensive access to the VirusTotal API, enabling users to quickly check the reputation of files, URLs, and domains, and to enrich threat intelligence data.

Core Features & Use Cases

  • Threat Intelligence: Scan files, URLs, and domains for malicious activity using VirusTotal's extensive database.
  • API Reference: Provides detailed information on both Free (Public) and Premium (Enterprise) API endpoints, including rate limits, authentication, and available data.
  • Use Case: A security analyst needs to determine if a suspicious file hash is malicious. They can use this Skill to query VirusTotal and receive an immediate report on the file's threat status.

Quick Start

Use the virustotal-api skill to check if the SHA-256 hash '44d88612fea8a8f36de82e1278abb02f' is malicious.

Frequently Asked Questions about virustotal-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a file hash for malware using VirusTotal?▼

To check a file hash for malware using VirusTotal, you query the VirusTotal API v3 with the hash to retrieve an immediate threat intelligence report on the file's reputation and malicious status.

Can I use the VirusTotal API to scan URLs and domains for threats?▼

Yes, you can use the VirusTotal API to scan URLs and domains for threats. The API provides comprehensive access to query the reputation of URLs and domains for malicious activity.

What is the difference between free and enterprise VirusTotal API tiers?▼

The difference between free and enterprise VirusTotal API tiers involves rate limits, available data, and endpoint access. The Skill details authentication and endpoint usage for both public and premium enterprise tiers.

How do I enrich threat intelligence data with IoCs?▼

You enrich threat intelligence data with IoCs by querying the VirusTotal API v3. This process involves submitting indicators like file hashes or URLs to receive comprehensive threat status reports.

Do I need an API key to query VirusTotal for threat intelligence?▼

Yes, you need an API key to query VirusTotal for threat intelligence. The Skill details the authentication process required to access both free and enterprise API endpoints for security analysis.

What are the rate limits for the VirusTotal API?▼

The rate limits for the VirusTotal API depend on your subscription tier. The Skill provides detailed information on the specific rate limits and endpoint usage restrictions for both free and premium enterprise accounts.

Related Skills

Explore More Software Engineering Skills→
stharroldstharrold

workflow-utilities

Consolidate workflow operations into a unified utility suite.

Community
Intermediate
Liberty91LTDLiberty91LTD
15

ioc-export

Export IOC collections to CSV, STIX 2.1, OpenIOC, and MISP bundles.

Official
Intermediate
woohyun212woohyun212
21

malware-hash

Query VirusTotal for hash reputation and per-vendor malware detection results.

Community
Advanced
mikopbxmikopbx
569

container-inspector

Retrieve MikoPBX Docker container IPs, ports, and API URLs.

Official
Advanced