fittings-fcc-census-block

SUSPICIOUS. The core census-block lookup purpose is legitimate and the FCC provenance is coherent, but the skill’s trust model is disproportionate: it instructs users to download a mutable remote script and then hand it a plaintext wallet private key for payment signing. That makes the main risk supply-chain compromise and credential forwarding, not the geodata lookup itself.