weather-api

SUSPICIOUS. The core weather capability is plausible, but the skill’s real footprint expands into wallet-secret handling and third-party payment mediation. The main concern is forwarding STELLAR_SECRET to a not-clearly-official 402md package and routing payment flow through facilitator infrastructure with inconsistent public documentation; this is disproportionate for a simple weather skill, though not enough to confirm malware.