busa-wechat-crm

SUSPICIOUS: the business purpose and data-minimization rules are mostly coherent, and the flagged command-injection/autonomy issues appear to be false positives. The main concern is install and trust: the skill depends on an external WeChat-reading CLI distributed via curl|sh and on multiple other skills, creating a high supply-chain/trust-chain risk for a workflow handling very sensitive personal data.