weather-nws-point-forecast
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The stated weather purpose is plausible, but the actual footprint is not proportionate: it asks for a blockchain private key, routes calls through a paid third-party wrapper for public NOAA data, and may download/execute an unverifiable client script. This is best classified as suspicious/high-risk rather than confirmed malware.
Confidence: 87%Severity: 84%
Audit Metadata