fittings-ctgov-trial-search

SUSPICIOUS. The stated purpose matches trial search, but the skill routes a public NIH dataset through a third-party gateway, asks the agent to download and execute remote code, and forwards a plaintext blockchain private key into that payment flow. These behaviors are disclosed and somewhat proportionate to the monetized service model, so this is not confirmed malware, but it carries meaningful supply-chain, credential-handling, and autonomous-spending risk.