wot

SUSPICIOUS: core WoT lookup behavior matches the stated purpose, and there is no install-chain or obvious exfiltration beyond the declared APIs. Risk comes from the paid fallback: it expands a read-only reputation skill into wallet-backed, credentialed, potentially autonomous spending against a second external domain whose relationship to the free API is not established in the skill text.