Website Pickpocket

• Analyzed: May 11, 2026, 6:10 AM
• Findings: 1
• Version: 0.1.0
• Hash: 297d1aff6737e1cb6cda454a5af0a239ec4251dbdd99fcb37d8875df10d0ae26
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'website-pickpocket' skill (SKILL.md) describes a tool designed to 'perfectly replicate' any website into local projects or frameworks like React and Vue. While its stated purpose includes backup and migration, the tool's name and features—such as session/cookie cloning, anti-bot bypass, and deep recursive crawling—are high-risk capabilities frequently used for phishing and intellectual property theft. There is no explicit evidence of the tool attacking the host environment or exfiltrating user secrets, but its core functionality is highly conducive to malicious use.