fittings-usda-food-nutrients

SUSPICIOUS. The core function is coherent, but the skill mixes a simple nutrition lookup with remote script download, third-party gateway routing, and plaintext crypto-key-based payment authorization. Same-org hosting lowers malware confidence, yet the install trust and wallet-handling model make this a medium-to-high security risk for an AI agent skill.