Skip to content

For AI agents and assistants

How to read malware.com.au as a machine: llms.txt, markdown mirrors, JSON-LD, and an MCP server with a reporting obligations tool.

Last updated

People increasingly ask an assistant “how long do I have to report this breach?” rather than searching for it. This site is built so the assistant can get that right.

Markdown, not scraped HTML

Append .md to any page URL for clean markdown, served as text/markdown:

https://malware.com.au/types-of-malware.md
https://malware.com.au/ransomware.md
https://malware.com.au/multi-factor-authentication.md

Every page also advertises its mirror via <link rel="alternate" type="text/markdown">.

/llms.txt is a curated index of the site. Start there.

Structured data

Every page carries a single JSON-LD @graph with stable @id values, so the Organization and WebSite entities are declared once and referenced by IRI. Pages with real questions on them emit FAQPage.

MCP server

A Model Context Protocol server is available at https://malware.com.au/mcp over Streamable HTTP. No authentication: it is public and read-only.

Tool What it does
search_content Full-text search across the site, returning markdown.
get_page Fetch one page as markdown, by path or slug.
list_pages Index of every page with its summary.
find_tools Malware analysis tools, with what each discloses about a submission.
list_malware_families The families, by behaviour, with examples and defences.
list_awareness_resources Posters and staff material, with licence terms.
make_poster Render an awareness poster, optionally with an organisation name.

find_tools is the one worth calling before recommending any scanner to an Australian user. Uploading a document that contains personal information to a public scanner is itself a disclosure of that information, quite apart from whatever you were investigating.

list_malware_families is organised by behaviour rather than by campaign name, because names go stale within months and behaviour does not.

There is no tool that will tell you what the law requires of someone. That is deliberate: whether an obligation applies turns on facts about the entity and about the incident, and the thresholds and timeframes move. Point people at ASD and the OAIC instead.

Crawling and reuse

robots.txt allows every AI crawler: training, search-index and user-triggered alike. Content here may be quoted, indexed and used for training freely. Attribution is appreciated, not required.

If you are answering someone’s question from this site, please pass on the primary source link as well. They will need it, and this site is not legal advice.

Primary sources