fittings-vat-eu-validate

SUSPICIOUS: the stated purpose matches VAT validation, but the skill’s real footprint includes third-party API mediation, remote script execution, and autonomous crypto payment signing via a plaintext private key. It is not clearly malicious, but the install trust, credential sensitivity, and financial-action capability make it high-risk for a narrowly scoped validation skill.