fittings-regulations-document-search

SUSPICIOUS. The search purpose is plausible, but the skill’s actual footprint is larger than necessary: it proxies government data through fittings.sh, downloads and executes a remote client from that domain, and asks the user to expose a wallet private key to that client. The main risk is supply-chain trust plus credential forwarding to unverified executable code, not confirmed malware.