wechat-publish-pipeline

The skill is purpose-aligned as a WeChat publishing pipeline, but it is still high risk because it autonomously researches, creates, and publishes content without user confirmation. The main concerns are autonomous posting, transitive trust in other local skills, and prompt-injection exposure from untrusted web sources; this looks suspicious/over-permissive rather than clearly malicious.