website-cloner

SUSPICIOUS. The core website-building and GitHub Pages deployment capabilities align with the stated purpose, and there is no confirmed credential theft, stealth, or malicious data routing. Risk comes from supply-chain trust: mutable npm/npx installs and especially the ambiguous preinstalled website-analyzer dependency, which is invoked on deployed content without a clearly verifiable official source.