regulations-document-search

SUSPICIOUS: the stated purpose is benign, but the actual footprint is not proportionate. A civic search skill routes requests through a third-party gateway, requires a crypto wallet private key for paid use, and asks the agent to download and execute remote client code. This is not confirmed malware, but it creates meaningful supply-chain, credential-forwarding, and financial-action risk.