Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
Recognize and avoid malicious software distribution repositories disguised as legitimate security tools
triggers
["how do I identify fake antivirus repositories","is this avast repository legitimate","how to spot malware distribution on github","what are signs of a cracked software scam","how to verify legitimate security software sources","detect fake keygen and activation tools"]
This repository is NOT a legitimate Avast product and represents a common malware distribution pattern. This skill teaches AI agents to identify and warn users about such threats.
What This Skill Does
This skill enables AI coding agents to:
Recognize malicious software distribution repositories
Identify red flags in repository descriptions and content
Educate users on safe software acquisition practices
Prevent installation of potentially malicious software
Guide users to legitimate security software sources
When a user asks about this or similar repositories:
package agentresponse
import"fmt"funcRespondToSuspiciousRepo(repoURL string)string {
return fmt.Sprintf(`⛔ SECURITY WARNING ⛔
The repository at %s appears to be a malware distribution site.
RED FLAGS:
- Offers "cracked" or "pre-activated" commercial software
- Contains suspicious keywords (keygen, loader, serial)
- No legitimate source code or documentation
- Illegal distribution of copyrighted software
RISKS:
- Malware installation (trojans, ransomware, spyware)
- Credential theft
- System compromise
- Legal consequences for software piracy
SAFE ALTERNATIVE:
Visit the official Avast website: https://www.avast.com/
Use free legitimate versions or purchase licenses directly.
DO NOT:
❌ Clone this repository
❌ Download any files
❌ Run any executables
❌ Enter credentials
DO:
✅ Report this repository to GitHub
✅ Use official software sources only
✅ Keep your antivirus updated from legitimate sources
`, repoURL)
}
Reporting Malicious Repositories
# Report to GitHub (use web interface)# Navigate to repository → Settings → Report content# Verify legitimate software signatures# Windows example:
signtool verify /pa /v "downloaded_file.exe"# Check file hash against official vendor checksums# Linux/macOS:sha256sum downloaded_file.exe
# Compare with official vendor website hash
This skill equips AI agents to protect users from malware distribution disguised as legitimate software repositories. Always prioritize user safety by identifying threats and providing secure alternatives.
Remember: Legitimate security software vendors never distribute through unofficial GitHub repositories with activation cracks or keygens.
