aws-wechat-article-assets

SUSPICIOUS. The skill’s core asset-library behavior is coherent, but it also imports secrets from `.aws` bundles into plaintext `aws.env` at the repo root and leaves backup copies, which is disproportionate for a content-assets skill. Same-org download restrictions and ZIP-slip defenses lower concern, but remote configuration bundles that can mutate local secrets keep this at medium risk rather than benign.