rxnorm-normalize

SUSPICIOUS. The stated purpose is coherent, but the skill’s footprint is broader than necessary: it proxies medical lookups through fittings.sh, encourages remote helper download, and can authorize spending using a plaintext blockchain private key. This looks more like a paid gateway client than a minimal RxNorm normalizer, so the main concerns are third-party data routing, credential exposure, and supply-chain trust rather than confirmed malware.