fittings-lei-lookup

SUSPICIOUS. The core purpose is coherent, but the skill adds disproportionate trust and credential exposure for a simple LEI lookup: it routes data through a third-party gateway and asks the agent to download a mutable helper script that may handle a wallet private key. Same-domain provenance reduces but does not remove the supply-chain and credential-forwarding risk.