fittings-devicerecall-search

SUSPICIOUS. The stated recall-search purpose is plausible, but the skill expands into crypto-enabled payment authorization through a remotely downloaded, unpinned script that receives a plaintext private key. The FDA data source is legitimate, yet the install trust and credential-forwarding model are disproportionate to a simple medical recall lookup.