semver-bump-classify

SUSPICIOUS: the core semver-classification purpose is coherent, but the skill mixes simple version analysis with remote helper download and cryptocurrency-style payment signing. Data flows appear first-party to fittings.sh rather than overtly deceptive, yet the install path and private-key handling create medium-high security risk disproportionate to such a simple function.