Spot malware risks in antivirus download repos.
Identifies warning signs in security-software repositories and gives guidance on avoiding and reporting suspected malware distribution.
When to use it
Use when asked to assess a security-software repository, check an antivirus download's legitimacy, or identify malware-distribution patterns.
Give it a security-software repository to assess; it provides a threat warning and guidance on avoiding suspicious downloads.
What you provide
The optional automated-scanner example reads a GitHub token from the environment.
The environment setup for optional automated scanning tools exports a VirusTotal API key; its use with other credentials is not specified.
This skill
GitHub
Reports malicious repositories to GitHub (irreversible)
Google Safe Browsing
Reports malware to Google Safe Browsing (irreversible)