Spot malware disguised as security software.
Identifies suspicious software repositories and helps assemble evidence and reports of possible malware distribution.
When to use it
Use when investigating suspected malware distribution, fake security software, or credential-stealing repositories.
Give it a suspicious repository; it assesses malware indicators and produces an evidence report with a recommendation.
What you provide
The evidence-collection example optionally reads GITHUB_TOKEN from the environment to authenticate GitHub API requests.
This skill
GitHub
Reports repositories to GitHub (irreversible)