nws-current-conditions

SUSPICIOUS. The purpose is coherent, but the skill’s actual footprint is disproportionate: it fetches unreviewed remote code, executes it locally, and forwards a wallet private key to that client for automated payments, while routing weather access through a third-party gateway instead of the official NWS API. This is high security risk but not confirmed malware from the provided evidence.