wechat-toolkit

Overall footprint mostly matches the stated WeChat content workflow, but the skill is not fully low-risk. The main issues are credential forwarding to a third-party publishing CLI, external draft publication capability, and optional transitive use of another skill. This is better classified as suspicious/medium-risk than benign, though there is no strong evidence of malware or covert exfiltration.