fittings-fda-drug-recall

SUSPICIOUS. The core recall-lookup purpose is coherent, and the stated upstream FDA source is plausible, but the skill adds a paid gateway, routes requests through fittings.sh instead of direct official APIs, and may download unpinned remote code that can receive a wallet private key for signing. That combination is proportionally risky for a simple health-data lookup, though not enough here to confirm malware.