pp-tella

SUSPICIOUS. The skill is mostly aligned with Tella automation and uses sources that appear tied to the stated publisher, so it does not look like confirmed malware. Risk comes from mutable installer paths, optional MCP registration, arbitrary webhook output delivery, and especially the unofficial feature that forwards a copied browser session cookie to the CLI for internal endpoint access.