nws-active-alerts

SUSPICIOUS: the purpose is coherent at a high level, but the actual footprint is broader than a normal weather skill. It routes requests through a third-party paid gateway, may fetch and run a helper script from that gateway, and can use a blockchain private key for payment authorization. This is not confirmed malware, but the install trust and credential-forwarding model are disproportionate for simple weather lookups.