Standardmäßig ist der Prompt ausgewählt, der zuerst die Quelle prüft. Sie können zu einem direkten Befehl wechseln oder eine lokale Kopie herunterladen.
Quelldateien prüfen
Lesen Sie SKILL.md und alle von SkillsMP angezeigten Begleitdateien, bevor Sie sich für eine Installation entscheiden.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.
This project is NOT legitimate Bitdefender software. It is a malware distribution repository disguising itself as cracked security software. This skill documents how to identify and handle such threats.
What This Repository Actually Is
This is a malicious repository that:
Falsely claims to provide "cracked" Bitdefender Total Security
Uses SEO-optimized keywords to attract victims searching for pirated software
Contains no actual code (empty README, no source files)
Uses deceptive topics like "defender-bypass" and "thread-hijacking"
Artificially inflates stars to appear legitimate
Distributes malware, ransomware, or information stealers
Identification Patterns
Red Flags for Malware Repositories
Suspicious Description Keywords:
"Crack", "Keygen", "Loader", "Pre-Activated"
"License Key", "Full Version", "Activation"
Version numbers that don't exist (2026 when current year is earlier)
Repository Characteristics:
No actual source code or empty README
Recent creation with rapid star accumulation
No legitimate commit history
Topics include "bypass" and exploit terminology
NOASSERTION license or no license
Deceptive Naming:
Legitimate software name + "Crack"/"Download"
Version numbers in future dates
Setup/Installer in project name
Security Analysis Workflow
Step 1: Repository Investigation
package main
import (
"fmt""strings"
)
// RepositoryAnalysis contains threat indicatorstype RepositoryAnalysis struct {
Name string
Description string
Topics []string
HasReadme bool
StarRate float64
ThreatScore int
}
// AnalyzeThreatLevel calculates risk scorefunc(r *RepositoryAnalysis) AnalyzeThreatLevel() int {
score := 0// Check for crack/piracy keywords
crackKeywords := []string{"crack", "keygen", "loader", "pre-activated", "license key"}
for _, keyword := range crackKeywords {
if strings.Contains(strings.ToLower(r.Description), keyword) {
score += 20
}
}
// Check for bypass/exploit topics
dangerousTopics := []string{"defender-bypass", "thread-hijacking", "exploit-mitigation"}
for _, topic := range r.Topics {
for _, dangerous := range dangerousTopics {
if topic == dangerous {
score += 15
}
}
}
// High star rate with no contentif r.StarRate > 3 && !r.HasReadme {
score += 25
}
// No README is suspicious for "software" repoif !r.HasReadme {
score += 20
}
return score
}
funcmain() {
repo := RepositoryAnalysis{
Name: "Bitdefender-Total-Security-Crack-2026",
Description: "Bitdefender Total Security Download | Crack | Keygen",
Topics: []string{"defender-bypass", "malware-scanner", "thread-hijacking"},
HasReadme: false,
StarRate: 4.0,
}
threatScore := repo.AnalyzeThreatLevel()
fmt.Printf("Repository: %s\n", repo.Name)
fmt.Printf("Threat Score: %d/100\n", threatScore)
if threatScore > 50 {
fmt.Println("⚠️ HIGH RISK: Likely malware distribution")
} elseif threatScore > 30 {
fmt.Println("⚠️ MEDIUM RISK: Suspicious patterns detected")
} else {
fmt.Println("✓ Low risk")
}
}
Step 2: Content Verification
package main
import (
"fmt""os""path/filepath"
)
// VerifyRepositoryContent checks for legitimate source codefuncVerifyRepositoryContent(repoPath string) (bool, []string) {
issues := []string{}
hasSourceCode := false// Check for actual code files
sourceExts := []string{".go", ".py", ".js", ".cpp", ".c"}
err := filepath.Walk(repoPath, func(path string, info os.FileInfo, err error)error {
if err != nil {
return err
}
if !info.IsDir() {
ext := filepath.Ext(path)
for _, sourceExt := range sourceExts {
if ext == sourceExt {
hasSourceCode = truereturnnil
}
}
// Check for suspicious executablesif ext == ".exe" || ext == ".dll" || ext == ".bat" {
issues = append(issues, fmt.Sprintf("Suspicious executable: %s", path))
}
}
returnnil
})
if err != nil {
issues = append(issues, fmt.Sprintf("Error scanning: %v", err))
}
if !hasSourceCode {
issues = append(issues, "No source code found - likely malware dropper")
}
return hasSourceCode, issues
}
Protection Measures
For Developers
Never clone or run code from suspicious repositories:
# DO NOT run these commands on suspicious repos:# git clone <suspicious-repo># go run main.go# ./setup.exe# Instead, report the repository
Reporting Malicious Repositories
GitHub Security Advisory:
Navigate to the repository
Click "Security" tab
Report as malware distribution
Using GitHub API (with proper authentication):
package main
import (
"bytes""encoding/json""fmt""net/http""os"
)
type AbuseReport struct {
URL string`json:"url"`
Reason string`json:"reason"`
Details string`json:"details"`
}
funcReportMaliciousRepository(repoURL string)error {
// Use GitHub's abuse reporting// Requires authentication via GITHUB_TOKEN env var
report := AbuseReport{
URL: repoURL,
Reason: "malware-distribution",
Details: "Repository distributing malware disguised as cracked software",
}
jsonData, err := json.Marshal(report)
if err != nil {
return err
}
// This is a conceptual example - GitHub abuse reports go through web form
fmt.Printf("Report prepared for: %s\n", repoURL)
fmt.Printf("Report details: %s\n", string(jsonData))
fmt.Println("Visit https://support.github.com/contact/report-abuse to submit")
returnnil
}
Never download cracked software - always use legitimate sources
Use official package managers when available (apt, brew, winget)
Verify checksums from official sources
Enable Windows Defender or legitimate antivirus
Keep software updated through official channels
Use $ANTIVIRUS_API_KEY environment variables for legitimate security tools
Educational Use Only
This skill is for security research and education to help identify and report malware distribution channels. Never use information to create or distribute malware.
