time-public-holidays

SUSPICIOUS. The holiday lookup purpose is coherent, and the service/provenance claims broadly match the live fittings.sh catalog and Nager.Date source. However, the skill instructs the agent to download an unverified helper script and then provide a wallet private key to it for paid execution. That combination is disproportionate and triggers high supply-chain and credential-forwarding risk even without proof of malicious intent.