fittings-nws-area-alerts

SUSPICIOUS: the skill’s purpose and stated data source are coherent, but its install and execution model is risky. It requires downloading an unpinned remote script and, for paid use, handing that script a wallet private key; this triggers high supply-chain and credential-forwarding concern even without clear evidence of malicious intent.