fittings-nws-point-metadata

SUSPICIOUS. The purpose is coherent as a weather metadata lookup, but the actual footprint is disproportionate: it routes weather access through a third-party paid gateway, requires a blockchain private key, and asks the agent to execute an unpinned downloaded helper script. The combination of remote-script install plus credential forwarding makes this a high security risk even without proof of malicious intent.