sec-ticker-resolve

SUSPICIOUS: the business purpose is plausible, but the skill’s footprint is disproportionate because it asks the agent to fetch an unverified remote script and then pass a wallet private key into it for paid execution. The third-party routing through fittings.sh is coherent with the service model, but the install and credential-forwarding pattern makes this high security risk even without proof of malicious intent.