Malwarebytes agent skills for Claude Code, Cursor and RevampKey

3 ready-made playbooks that teach an AI agent how to do real Malwarebytes work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect Malwarebytes

Connect Malwarebytes once and all 3 skills install themselves and stay up to date. Mac, Windows and Linux.

All 3 Malwarebytes skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereRead-only6 Malwarebytes tools

Check suspicious links, numbers and emails with Malwarebytes

Checks links, phone numbers, email addresses and domains against Malwarebytes threat intelligence and explains the verdict in plain terms. It asks before reporting anything to Malwarebytes.

Use it when

You received a text or email with a link and want to know if it is safe to click.
An unknown number keeps calling and you want to know if it is a scam.
You want to check several items from one suspicious message at once.

Tools it uses

reputation-check_link
reputation-check_phone
reputation-check_email
reputation-whois
reputation-scan_all
reputation-report

Example

I got a text saying my parcel is held with this link http://txdmv.gov-mbjn.vip/track and to call +1-833-487-2544. Is any of it safe?

The link is malicious and the phone number is suspicious. Together with the call-to-action in the message, this looks like a scam. Do not click the link or call the number. If you want, I can report the link to Malwarebytes once you confirm.

Use in RevampKeyRead the full skill →

Read-only5 Malwarebytes tools

Triage a suspicious message with Malwarebytes in Claude

Paste a suspicious text or email and get one overall risk verdict, checking every link, phone number and sender address together. Claude asks before reporting anything to Malwarebytes.

Use it when

You got a text saying your parcel is held and want to know if the link is safe
A bank-style email asks you to verify your account and you are unsure it is real
You want every link and number in a message checked at once

Tools it uses

reputation-check_link
reputation-check_phone
reputation-check_email
reputation-scan_all
reputation-whois

Example

I got this text: 'Your parcel is held, pay the fee at http://parcel-track-help.co within 24 hours or call +1-833-487-2544.' Is it a scam?

Overall risk: high. The link and the callback number are both flagged as malicious, and the 24-hour deadline is a classic pressure tactic. Do not click the link or call the number. Delete the message, and if you want the link reported to Malwarebytes I will ask you to confirm first.

Use in RevampKeyRead the full skill →

Read-only6 Malwarebytes tools

Check a suspicious caller or website with Malwarebytes and AI

Investigates one suspicious phone number or website domain, combining the number check or WHOIS lookup with the link check to judge whether it is legitimate, then recommends whether to block, ignore or report it. It asks before reporting anything.

Use it when

A number keeps calling about a car warranty, a parcel or a bank account
You are not sure whether a website you were sent is the real company's site
You want to know who registered a domain and whether it is new

Tools it uses

reputation-check_link
reputation-check_phone
reputation-whois
reputation-check_email
reputation-report
reputation-scan_all

Example

Someone keeps calling me from +1-833-487-2544 about my car warranty. Is this a scam, and should I block it?

That number is flagged as suspicious, and the pattern matches warranty-scam calls, so I would block it. The number is not a known carrier line for any major warranty company. Your real warranty provider's number is printed on your policy paperwork, so use that route if you need to check your coverage. I have not reported it because you have not asked me to yet.

Use in RevampKeyRead the full skill →

Get all 3 without copying a file

RevampKey adds the skills when you connect Malwarebytes, updates them for you and removes them when you disconnect.

Download RevampKey

How Malwarebytes skills work

Connect Malwarebytes
The Malwarebytes MCP server gives the agent its tools.
Ask in plain words
“I got this text: 'Your parcel is held, pay the fee at http://parcel-track-help.co within 24 hours or call +1-833-487-2544.' Is it a scam?” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install Malwarebytes skills

In RevampKey the skills install themselves when you connect Malwarebytes. In other tools each skill is one folder with a SKILL.md file, and you also need the Malwarebytes MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect Malwarebytes. All 3 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “I got this text: 'Your parcel is held, pay the fee at http://parcel-track-help.co within 24 hours or call +1-833-487-2544.' Is it a scam?”
Download RevampKeyConnect Malwarebytes · 1 click
Get RevampKey to connect Malwarebytes
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and Malwarebytes is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials phishing-message-triage scam-call-and-domain-check; do curl -fsSL --create-dirs -o .claude/skills/malwarebytes-$s/SKILL.md https://revampkey.com/marketplace/malwarebytes/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the Malwarebytes MCP server in Claude Code.

Run this in your project folder to add all 3 skills:

for s in essentials phishing-message-triage scam-call-and-domain-check; do
  curl -fsSL --create-dirs -o .claude/skills/malwarebytes-$s/SKILL.md https://revampkey.com/marketplace/malwarebytes/skills/$s/SKILL.md
done

Ask in plain language, for example “I got this text: 'Your parcel is held, pay the fee at http://parcel-track-help.co within 24 hours or call +1-833-487-2544.' Is it a scam?”

Into the shared .agents/skills folder

Connect the Malwarebytes MCP server in Cursor.

Run this in your project folder to add all 3 skills:

for s in essentials phishing-message-triage scam-call-and-domain-check; do
  curl -fsSL --create-dirs -o .agents/skills/malwarebytes-$s/SKILL.md https://revampkey.com/marketplace/malwarebytes/skills/$s/SKILL.md
done

Ask in plain language, for example “I got this text: 'Your parcel is held, pay the fee at http://parcel-track-help.co within 24 hours or call +1-833-487-2544.' Is it a scam?”

Into the shared .agents/skills folder

Connect the Malwarebytes MCP server in Codex.

Run this in your project folder to add all 3 skills:

for s in essentials phishing-message-triage scam-call-and-domain-check; do
  curl -fsSL --create-dirs -o .agents/skills/malwarebytes-$s/SKILL.md https://revampkey.com/marketplace/malwarebytes/skills/$s/SKILL.md
done

Ask in plain language, for example “I got this text: 'Your parcel is held, pay the fee at http://parcel-track-help.co within 24 hours or call +1-833-487-2544.' Is it a scam?”

Into the shared .agents/skills folder

Connect the Malwarebytes MCP server in VS Code.

Run this in your project folder to add all 3 skills:

for s in essentials phishing-message-triage scam-call-and-domain-check; do
  curl -fsSL --create-dirs -o .agents/skills/malwarebytes-$s/SKILL.md https://revampkey.com/marketplace/malwarebytes/skills/$s/SKILL.md
done

Ask in plain language, for example “I got this text: 'Your parcel is held, pay the fee at http://parcel-track-help.co within 24 hours or call +1-833-487-2544.' Is it a scam?”

RevampKey or copy the files?

In RevampKey

One click when you connect Malwarebytes
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the Malwarebytes MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

Malwarebytes skills FAQ

What is a Malwarebytes agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Malwarebytes skill describes one job, which Malwarebytes tools to use in which order, what to check first and when to stop and ask you.

Do the Malwarebytes skills change anything on their own?

3 of the 3 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Malwarebytes.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Malwarebytes; elsewhere you copy the folders into your project or skills directory.

Do I need the Malwarebytes MCP server too?

Yes. The skills tell the agent how to do the work; the Malwarebytes MCP server gives it the tools to do it. The Malwarebytes MCP setup guide covers every client.

Malwarebytes MCP server setup · This page as Markdown

Put Malwarebytes’s best workflows in your agent

Download RevampKey, connect Malwarebytes and ask your first question in about a minute.

Download RevampKey Connect Malwarebytes · 1 click

All 3 Malwarebytes skills

Check suspicious links, numbers and emails with Malwarebytes

Use it when

Tools it uses

Triage a suspicious message with Malwarebytes in Claude

Use it when

Tools it uses

Check a suspicious caller or website with Malwarebytes and AI

Use it when

Tools it uses

Get all 3 without copying a file

How Malwarebytes skills work

How to install Malwarebytes skills

RevampKey or copy the files?

In RevampKey

Copy into your project

Malwarebytes skills FAQ

Put Malwarebytes’s best workflows in your agent

Skills for related tools