fittings-cpi-adjust

SUSPICIOUS: the CPI-adjustment purpose is coherent, but the skill couples a simple data lookup to a custom payment system that requires a plaintext wallet private key and a remotely downloaded helper script. The main risk is supply-chain and credential-forwarding trust in fittings.sh/call.mjs, not confirmed malware.