notte

SUSPICIOUS. The core capabilities match a browser automation service, and the Notte domains appear official, so purpose alignment is mostly coherent. Risk is driven by the unverifiable `orth` CLI dependency, remote handling of sensitive browser artifacts, and autonomous browser actions on arbitrary sites; this looks more like a high-risk browser agent skill than confirmed malware.