wechat-article-camofox

SUSPICIOUS. The core extraction behavior matches the stated purpose, and the installed browser project is publicly verifiable, but the skill expands trust by automatically cloning and executing a third-party repo from a different org using unpinned `git clone` + `npm install` + `npm start`, with additional browser downloads at runtime. Optional Feishu publishing is purpose-aligned but adds real-world write actions. Overall this looks like a coherent skill with meaningful supply-chain and action-scope risk, not confirmed malware.