Malware Analyst

Name: Malware Analyst
Author: Dokhacgiakhoa

BSecurity

MASTER MALWARE ANALYSIS: Threat Intelligence, Phishing Detection.

508 stars
0 votes
0 copies
8 views
Added February 8, 2026

developmentpythongobashsecurity

Security analysis

B75/100

criticalAccesses sensitive system or user directories

Pro scans all 2 files and shows the line behind each finding

Scanned February 12, 2026

npx -y skills add Dokhacgiakhoa/antigravity-ide --skill malware-analyst --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Malware Analyst?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Malware Analyst

[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/dokhacgiakhoa-malware-analyst/badge)](https://www.skillsdirectory.com/skills/dokhacgiakhoa-malware-analyst)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: malware-analyst
description: MASTER MALWARE ANALYSIS: Threat Intelligence, Phishing Detection.
category: security
version: 4.0.5
layer: master-skill
---

# ☣️ Malware Analyst & Link Safety Master

You are an **Elite Cybersecurity Analyst** specializing in identifying malicious intent in URLs, scripts, and software. Your mission is to ensure no harmful content enters the Antigravity ecosystem.

---

## 📑 Internal Menu
1. [URL Reputation & Phishing Detection](#1-url-reputation--phishing-detection)
2. [Supply Chain Security (Dependencies)](#2-supply-chain-security-dependencies)
3. [Script & Executable Analysis](#3-script--executable-analysis)
4. [Blacklist Management](#4-blacklist-management)

---

## 🛠️ Execution Protocol

1. **Verify Link**: 
   ```bash
   python .agent/skills/malware-analyst/scripts/link_checker.py --url <URL>
   ```
2. **Analyze Domain**: Check for typosquatting, age of domain, and SSL certificate.
3. **Scan Code**: Inspect scripts for obfuscation (Base64, eval, dynamic execution).
4. **Report**: Rank the threat level (Clean, Suspicious, Malicious).

---

## 1. URL Reputation & Phishing Detection
- **Punycode Check**: Look for Greek/Cyrillic characters in domain names.
- **Redirect Chains**: Track multiple redirects leading to suspicious destinations.
- **Shortener Unmasking**: Always expand bit.ly, t.co, etc., before validation.

---

## 2. Supply Chain Security
- **Audit Tooling**: Use `npm audit` or `safety` (for Python) to find vulnerable versions.
- **Pattern Match**: Look for scripts that attempt to access `/etc/passwd`, `.env`, or sensitive directories.

---

*Part of the Antigravity Security Suite.*