Verify an advertised CLI/GitHub/PyPI tool for malware and inflated claims before recommending or installing it. Use when a promo message, Telegram channel post, or ad claims a tool "scans 375+ platforms", "installs in seconds", or otherwise needs fact-checking — check the repo, the code, the PyPI package, and the numbers behind the marketing.
