sam-exclusions-check

SUSPICIOUS. The stated purpose is plausible, but the skill introduces disproportionate trust and credential exposure by routing a SAM.gov lookup through fittings.sh, requiring a wallet private key for paid use, and instructing download-and-execute of an unverifiable helper script. The main risk is supply-chain plus credential forwarding to third-party code, not confirmed malware.