Standardmäßig ist der Prompt ausgewählt, der zuerst die Quelle prüft. Sie können zu einem direkten Befehl wechseln oder eine lokale Kopie herunterladen.
Quelldateien prüfen
Lesen Sie SKILL.md und alle von SkillsMP angezeigten Begleitdateien, bevor Sie sich für eine Installation entscheiden.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.
⚠️ WARNING: This repository is MALICIOUS and should NOT be used.
The project viceofficialtower74/Avast-Premium-Security-Windows-Latest is a fraudulent repository that impersonates legitimate Avast security software to distribute malware, trojans, or other malicious payloads. This skill helps AI agents identify and warn users about such repositories.
Zero forks and zero issues (indicates fake engagement)
No legitimate README content
Created recently (2026-05-06) with rapid star accumulation
3. Impersonation Tactics
Uses trademarked name "Avast" without authorization
Claims to be "Full Version Installer" with activation bypasses
Professional-looking description with emojis to appear legitimate
4. Malware Distribution Indicators
Offers "Setup Keygen" which are commonly trojans
Promises free premium software (too good to be true)
No source code visible, only executables
Topics include legitimate terms mixed with piracy terms
How to Identify Such Repositories
Programmatic Detection (Python)
import os
import requests
defanalyze_repository_risk(repo_full_name):
"""Analyze a GitHub repository for malicious indicators"""
GITHUB_TOKEN = os.getenv('GITHUB_TOKEN')
headers = {'Authorization': f'token {GITHUB_TOKEN}'} if GITHUB_TOKEN else {}
api_url = f"https://api.github.com/repos/{repo_full_name}"
response = requests.get(api_url, headers=headers)
if response.status_code != 200:
return {"error": "Repository not found"}
data = response.json()
risk_score = 0
warnings = []
# Check description for cracking keywords
cracking_keywords = ['keygen', 'crack', 'pre-activated', 'loader',
'serial', 'license key', 'full version']
description = (data.get('description') or'').lower()
for keyword in cracking_keywords:
if keyword in description:
risk_score += 15
warnings.append(f"Description contains piracy term: '{keyword}'")
# Check star-to-fork ratio (fake engagement)
stars = data.get('stargazers_count', 0)
forks = data.get('forks_count', 0)
if stars > 50and forks == 0:
risk_score += 25
warnings.append(f"Suspicious metrics: {stars} stars but {forks} forks")
# Check for missing README
readme_url = f"https://api.github.com/repos/{repo_full_name}/readme"
readme_response = requests.get(readme_url, headers=headers)
if readme_response.status_code == 404:
risk_score += 20
warnings.append("No README file found")
# Check impersonation of known brands
known_brands = ['avast', 'norton', 'kaspersky', 'mcafee', 'bitdefender',
'adobe', 'microsoft', 'autodesk', 'vmware']
repo_name = data.get('name', '').lower()
for brand in known_brands:
if brand in repo_name and brand in description:
risk_score += 30
warnings.append(f"Impersonates legitimate brand: {brand}")
break# Assess risk levelif risk_score >= 60:
risk_level = "CRITICAL - Likely Malicious"elif risk_score >= 40:
risk_level = "HIGH - Highly Suspicious"elif risk_score >= 20:
risk_level = "MEDIUM - Suspicious"else:
risk_level = "LOW"return {
"repository": repo_full_name,
"risk_score": risk_score,
"risk_level": risk_level,
"warnings": warnings,
"recommendation": "DO NOT DOWNLOAD"if risk_score >= 40else"Investigate further"
}
# Example usage
result = analyze_repository_risk("viceofficialtower74/Avast-Premium-Security-Windows-Latest")
print(f"Risk Level: {result['risk_level']}")
print(f"Risk Score: {result['risk_score']}/100")
print("\nWarnings:")
for warning in result['warnings']:
print(f" ⚠️ {warning}")
print(f"\n🛡️ Recommendation: {result['recommendation']}")
Shell Script Detection
#!/bin/bash# Check if repository exhibits malicious patternscheck_malicious_repo() {
local repo_url="$1"local repo_path=$(echo"$repo_url" | sed 's|https://github.com/||')
echo"🔍 Analyzing repository: $repo_path"echo"━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"# Fetch repository datalocal api_response=$(curl -s "https://api.github.com/repos/$repo_path")
# Extract key fieldslocal description=$(echo"$api_response" | jq -r '.description // ""')
local stars=$(echo"$api_response" | jq -r '.stargazers_count // 0')
local forks=$(echo"$api_response" | jq -r '.forks_count // 0')
local issues=$(echo"$api_response" | jq -r '.open_issues_count // 0')
# Check for red flagslocal risk_found=falseifecho"$description" | grep -iE 'keygen|crack|loader|pre-activated|serial|license key' > /dev/null; thenecho"❌ DANGER: Description contains software piracy terms"
risk_found=truefiif [ "$stars" -gt 30 ] && [ "$forks" -eq 0 ]; thenecho"❌ DANGER: Artificial star inflation detected ($stars stars, $forks forks)"
risk_found=truefiifecho"$repo_path" | grep -iE 'avast|norton|adobe|microsoft|vmware|autodesk' > /dev/null; thenecho"❌ DANGER: Impersonates well-known software brand"
risk_found=truefiif [ "$risk_found" = true ]; thenecho"━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"echo"🚨 VERDICT: MALICIOUS REPOSITORY DETECTED"echo"⛔ DO NOT CLONE OR DOWNLOAD FROM THIS REPOSITORY"return 1
elseecho"✅ No obvious malicious indicators found"return 0
fi
}
# Example usage
check_malicious_repo "https://github.com/viceofficialtower74/Avast-Premium-Security-Windows-Latest"
What Users Should Do
If You Encounter Such Repositories:
DO NOT download any files from the repository
Report the repository to GitHub via their abuse form
Warn others by creating awareness
Scan your system if you already downloaded files
Reporting to GitHub
# Report via GitHub CLI
gh api \
--method POST \
-H "Accept: application/vnd.github+json" \
/repos/viceofficialtower74/Avast-Premium-Security-Windows-Latest/abuse \
-f message="This repository distributes malware disguised as cracked Avast software"
Safe Alternatives
# Always verify software from official sources
LEGITIMATE_SOURCES = {
"avast": "https://www.avast.com/",
"windows_defender": "Built into Windows 10/11",
"clamav": "https://www.clamav.net/ (Open Source)"
}
defget_legitimate_source(software_name):
"""Get the official download source for security software"""return LEGITIMATE_SOURCES.get(software_name.lower(),
"Search official vendor website")
Indicators of Compromise (IoC)
If you've interacted with this repository:
Scan your system immediately with legitimate antivirus
