fittings-nhc-active-cyclones

SUSPICIOUS. The weather purpose is coherent, but the skill’s real footprint includes downloading an unverifiable helper script and giving it a blockchain private key for payment signing. That combination is disproportionate to a simple weather query and creates a high credential-forwarding and supply-chain risk even without clear evidence of outright malware.