fittings-hts-search

SUSPICIOUS. The stated HTS-search purpose is plausible, but the skill’s real footprint is disproportionately risky: it asks the agent to download and execute an unverifiable remote JS client, then pass a plaintext wallet private key into it to authorize paid requests through a third-party gateway. The data source and x402 model may be legitimate, but the install and credential flow are not proportionate to a search skill.