nws-point-forecast

SUSPICIOUS. The stated weather purpose is plausible, but the actual footprint is broader: it relies on a remotely downloaded client, routes calls through a third-party gateway instead of directly to NOAA, and asks for a blockchain private key to authorize spending. That combination is disproportionate for a forecast skill and creates high supply-chain and credential-forwarding risk, though there is not enough evidence to call it confirmed malware.