clone-website

SUSPICIOUS: the skill’s purpose and capabilities broadly align, but it combines arbitrary external web-content ingestion with file generation, asset downloading, autonomous code changes, and command execution. Install trust is mostly acceptable when official MCP servers are used, yet the open-ended browser/MCP dependency and indirect prompt-injection surface make this a medium-high security risk rather than benign.