restaurant-booking

SUSPICIOUS. The skill’s capabilities broadly match its stated restaurant-booking purpose, but it sends user PII and booking actions through a third-party remote browser automation service (`api.orth.sh`) instead of interacting only with official booking sites. The npm-based CLI install is ordinary, not overtly malicious, yet the combination of remote session control, CAPTCHA solving, and autonomous real-world booking means the trust footprint is larger than a simple booking helper. Medium risk rather than confirmed malware.