clone-page

Overall behavior is consistent with DOM/style extraction and local artifact generation. The primary security concern in this module is the use of dynamic code execution in the browser context (new Function on content loaded from a local helper file). If that helper or its supply chain is compromised, this creates a strong escalation path to arbitrary browser-page execution. Aside from that, selector input directly drives DOM querying/screenshot capture, and extracted data is written to disk without schema validation, but there are no explicit signs of exfiltration or system-level malicious activity in this fragment.