swpc-space-weather-scales

SUSPICIOUS. The skill’s purpose is plausible, but it asks the agent to download unverified executable logic from fittings.sh and then supply a plaintext wallet private key to that script. The service domain is consistent with the publisher, yet the lack of pinning or public verification for call.mjs and the credential forwarding push this beyond a benign API wrapper.