nws-area-alerts

SUSPICIOUS: the core weather purpose is coherent, and NOAA provenance is plausible, but the skill relies on downloading and executing an unpinned same-domain script, then optionally handing it a wallet private key for payment signing. That combination is high supply-chain and credential-forwarding risk even without proof of malicious intent.