fittings-epa-tri-releases

SUSPICIOUS. The purpose is coherent, but the skill’s footprint is broader than a simple EPA data lookup because it uses a custom paid gateway, downloads an unverifiable client, and forwards a wallet private key to that client for signing. That combination makes the install and credential flow high risk even without clear evidence of malicious intent.