nhc-active-cyclones

SUSPICIOUS. The skill’s stated purpose is coherent, but it requires executing an unverifiable remote client and forwarding a plaintext wallet private key to that client for payment authorization. That combination is disproportionate for a weather lookup and triggers high supply-chain and credential-forwarding risk, even though there is no direct evidence of confirmed malware.