dineway-building-clone

SUSPICIOUS. The core behavior is coherent for a website-cloning skill, and its package installs appear to use normal npm-based distribution rather than obviously rogue binaries. However, it has a broad and powerful footprint: it consumes untrusted web content, downloads external assets, writes extensively to the local project, executes package/build tooling, and depends on another skill for guidance. Those combined factors create meaningful security risk even without direct credential theft or confirmed malware.