fittings-nws-current-conditions

SUSPICIOUS. The stated weather purpose is coherent, but the skill’s footprint is disproportionate: it fetches and runs remote code from fittings.sh, routes calls through a third-party gateway instead of the official NWS API, and asks for a blockchain private key to authorize payments. That combination makes this a high-risk skill even without proof of malicious intent.