fittings-time-public-holidays

SUSPICIOUS: The holiday-query purpose is coherent, and network targets mostly match the stated service, but the skill’s real footprint includes downloading and running remote JS plus supplying a wallet private key to it for paid calls. That combination is disproportionate for a simple data lookup and creates significant supply-chain and credential-forwarding risk even without direct evidence of malicious exfiltration.