fittings-quake-nearby

SUSPICIOUS. The purpose is coherent, but the skill’s footprint is broader than a simple earthquake lookup: it downloads and executes a mutable remote helper script, requests a plaintext private key for payment, and enables bounded autonomous spending through the publisher’s gateway. The same-origin publisher relationship reduces signs of outright malicious intent, but the install and credential model make this a high security-risk skill.