pp-tesla

SUSPICIOUS. The skill's capabilities broadly match its stated Tesla-control purpose, but its trust footprint is large: multiple external binaries, unauthenticated registry-driven installation, unpinned installs/builds, credential export/import, SCP transfer, arbitrary webhook delivery, and commands with real-world effects on a vehicle. This looks more like a legitimate but high-risk remote-control skill than confirmed malware.