notify-wecom

SUSPICIOUS: The core behavior matches a WeCom notification skill and data appears to flow to the expected official endpoint, so it is not fundamentally incompatible with its purpose. However, it performs autonomous outbound messaging without confirmation and relies on an unverified companion skill/local sender script, creating medium trust and supply-chain risk.