quake-nearby

SUSPICIOUS. The earthquake-query purpose broadly matches the capability, but the skill’s actual footprint is larger than a simple data lookup: it downloads and executes a same-origin helper script, routes access through a third-party paid gateway instead of the original USGS source, and asks the agent to hold a blockchain private key for spending authorization. This is not confirmed malware, but it is a high-risk skill due to remote-code trust and credential-forwarding concerns.