lunar-moon-times

SUSPICIOUS. The stated purpose is coherent, but the skill pairs a niche moon-data API with direct script download, execution, and forwarding of a plaintext wallet private key to that script for off-chain payment signing. That scope is disproportionate for a simple data lookup unless the installer and code are fully verifiable; based on the available evidence, install trust and credential handling are the main risks.