weather-nws-point-forecast

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The stated weather purpose is plausible, but the actual footprint is not proportionate: it asks for a blockchain private key, routes calls through a paid third-party wrapper for public NOAA data, and may download/execute an unverifiable client script. This is best classified as suspicious/high-risk rather than confirmed malware.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fweather-nws-point-forecast%2F@8ebcdb428082a8d46054db4b4d64a745ebeeb4cc16077163eb8d2a8796721b89