wechat-draft-publisher

SUSPICIOUS: The stated purpose is coherent with publishing WeChat drafts and the required credentials are proportionate, but the executable logic and dependency manifest are missing. That leaves moderate unresolved risk around dependency trust, credential forwarding, and the undisclosed IP-check network path; there is no clear evidence of malicious exfiltration from the provided text alone.