Anti-Malware Cog

Occasionally, users will upload malicious files that slip past Discord’s fairly limited protections. Thus far, thanks to the sharp eyes of the staff, we’ve been able to catch most of these before they had a chance to be downloaded. However, as the server grows, the risk increases of something being available and potentially downloaded before the staff notices it. The goal of this cog is to eliminate that risk by checking message attachments for malicious or other undesirable content.

Features

• Checking of files for malicious content (Current approach is to use the VirusTotal database API for this purpose)
• Automatic removal of bad files
• Alerting of the moderator team of incidents (much like the current antispam cog)
• Optional ability to filter by extensions (e.g. warn if someone uploads a non-malicious zip file)
• Stretch: plug in other file identification services, such as NSFW/hatespeech content detection, “shitpost”-grade memes, etc (like antispam, but for content, and ideally more reliable than the (IMO) unreliable garbage Discord uses)

Current working name for the cog is “sentinel”.

[sco1]

Relevant meta: https://github.com/python-discord/meta/issues/16

[GhostofGoes]

Moving here: https://github.com/python-discord/bot/issues/471