clone-website

SUSPICIOUS: the skill is internally coherent for website reconstruction, but it has medium risk because it combines broad interaction with arbitrary external websites, local file writes, asset downloading, and command execution. Install sources are mostly official and there is no clear credential theft, but the workflow is capable of cloning third-party sites and is exposed to indirect prompt injection from untrusted web content.