fittings-tax-us-state-sales-rate

SUSPICIOUS. The core purpose is coherent, but the skill’s paid path relies on downloading and running remote code and then exposing a cryptocurrency private key to that code so an agent can authorize spending. That footprint is disproportionate for a tax lookup and creates high supply-chain and credential-forwarding risk, even without clear evidence of outright malware.