tz-offset-at

SUSPICIOUS: the core timezone-query purpose is coherent, and the API endpoint matches the stated service, but the skill pairs that benign purpose with a raw download-and-execute path for call.mjs and forwards a wallet private key to that unverified script. That combination is disproportionate and triggers high supply-chain and credential-forwarding risk even without evidence of confirmed malicious exfiltration.