water-noaa-tides

SUSPICIOUS. The tide-query purpose is plausible, but the actual footprint is larger than needed: remote helper download, plaintext wallet private key handling, third-party payment infrastructure, and autonomous spending behavior. This looks more like a paid crypto-enabled API client than a simple NOAA tide skill; not confirmed malware, but high security risk.