fittings-papers

SUSPICIOUS. The stated purpose is citation verification, but the skill introduces a paid third-party gateway and requires a wallet private key for tasks that could normally use official public APIs directly. The main concern is disproportionate credential scope and intermediary routing, not confirmed malware.