fittings-hazard-active-events

SUSPICIOUS: The core hazard-query purpose is coherent, and the endpoint/domain alignment looks legitimate, but the paid path materially expands risk by downloading a same-origin remote script and giving it a plaintext wallet private key. That combination is disproportionate for a simple data-fetch skill and creates significant supply-chain and credential-forwarding risk even without clear evidence of malicious intent.