wechatsync-publisher

SUSPICIOUS. The publishing purpose broadly matches the functionality, but the skill’s core data flow is not direct-to-official APIs: it funnels content through an unverifiable self-hosted IP over HTTP and instructs users to centralize many platform credentials/cookies on that intermediary server. That scope and routing are disproportionate for a publishing helper and create significant interception, credential-forwarding, and unauthorized-posting risk.