sec-company-filings

SUSPICIOUS: the core SEC-filings purpose is coherent, but the skill adds medium-risk supply-chain and financial-authority exposure by downloading helper code and using a plaintext blockchain private key to sign off-chain payments through a third-party gateway. This looks more like a legitimate paid API skill than malware, but it is not low-risk.