fittings-text-similarity

SUSPICIOUS. The skill’s purpose and API usage are coherent, and the network endpoints match the stated service, but it relies on downloading and running an unpinned helper script and then exposing a blockchain private key to that script for signing. This is not clearly malicious, yet the install and credential-forwarding trust model is stronger than ideal for a simple similarity API.