rdap-domain

SUSPICIOUS. The skill’s lookup purpose is plausible, but it couples a simple RDAP query to execution of an unverifiable same-site helper and forwards a wallet private key into that helper. The data flow is centralized through fittings.sh rather than directly to official RDAP services, and the install path lacks verification artifacts. This is not confirmed malware, but the executable trust and credential-forwarding footprint are disproportionate for a domain lookup skill.