devicerecall-search

SUSPICIOUS. The recall-search purpose is coherent, but the skill’s actual footprint is broader than a simple FDA lookup: it downloads and executes a remote helper, sends a wallet private key into that helper for paid calls, and routes usage through a third-party gateway rather than the official FDA API. This is not confirmed malware, but it is a high-risk trust and credential-forwarding design for a medical data lookup skill.