web-clone

SUSPICIOUS: the stated purpose matches website-cloning behavior, but the skill's real footprint is broad and depends on unverifiable local executables. Its network-capture, mirroring, and source-map harvesting are coherent for cloning, yet the ability to use authenticated browsers on private sites and the transitive Browser/MCP dependency raise material security risk. High risk is driven mainly by execution trust, not confirmed malicious intent.