sec-company-facts

SUSPICIOUS. The skill’s purpose is simple public-financial-data retrieval, but it routes usage through a paid third-party gateway, asks the agent to download and execute remote helper code, and can use a wallet private key to authorize spending. Those capabilities are broader than necessary for the claimed task and create meaningful supply-chain and credential-forwarding risk.