fittings-treasury-exchange-rate

The stated purpose is coherent, but the implementation is high-risk for a skill: it downloads executable helper code from fittings.sh, then asks the user/agent to expose a plaintext private key to that code for payment signing. The third-party gateway and autonomous spending are disproportionate to a simple exchange-rate lookup. Suspicious rather than confirmed malware, but risky enough to avoid without strong provenance and source review.