quake-usgs-events

SUSPICIOUS. The read-only earthquake lookup purpose is plausible, but the skill’s real footprint is larger: it routes requests through a third-party gateway and asks the agent to download/run an unverifiable helper that receives a blockchain private key. That is disproportionate for a simple USGS event lookup and creates high supply-chain and credential-forwarding risk even without clear proof of malicious intent.