Website Pickpocket

• Outcome: Review
• Latest audit: May 29, 2026 at 9:24 PM UTC
• Version:
  0.1.0

Overview

This is an instruction-only website cloning skill, but it is broad and under-scoped for authenticated crawling and copying whole sites.

Review carefully before installing. Use it only on sites you own or are explicitly allowed to copy, keep crawl depth/page limits conservative, avoid anti-scraping workarounds unless authorized, and treat cookies/localStorage as credentials. Verify the separate pickpocket CLI before running it and review generated JavaScript and downloaded content before sharing or publishing the output.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The skill description is broad enough to encourage cloning 'any website' without scoping, ownership checks, or authorization boundaries. In a powerful agent context, vague triggers can cause the tool to be invoked for unauthorized scraping, content copying, or excessive resource use, especially since the skill explicitly supports recursive crawling and framework conversion.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The document describes large-scale crawling, asset downloading, and project generation but omits warnings about bandwidth consumption, storage growth, robots/ToS concerns, and legal/privacy implications of copying website content. That omission is risky because users or agents may run it against third-party sites without understanding the operational and compliance impact.

Missing User Warnings

High

• Confidence: 97% confidence
• Finding: Documenting reuse of session cookies and localStorage without a strong warning enables authenticated scraping with live user credentials. This can expose private account data, bypass normal access controls in practice, and lead to credential leakage or unauthorized replication of protected content if mishandled.

VirusTotal

63/63 vendors flagged this skill as clean.