malware-scan

Scan a repository for injected malware, supply-chain backdoors, and obfuscated loaders. Use when the user asks to audit code for malicious injection, check for backdoors, investigate a suspicious commit, verify a dependency, or respond to a security incident. Also use proactively when reviewing commits that touch build configs, postinstall scripts, CI files, or code from an untrusted contributor.