noaa-coops-station-data

SUSPICIOUS. The stated purpose is coherent, but the skill’s footprint is disproportionate: it routes public NOAA data through a third-party paid gateway, requires a blockchain private key for paid use, and relies on executing an unpinned remote helper script. This is not confirmed malware, but it is a high-risk trust and credential-forwarding design for a simple data-fetching skill.