wjs-publishing-wechat

SUSPICIOUS: the core WeChat publishing workflow is coherent, and data mainly flows to official GitHub/WeChat endpoints, so this is not confirmed malicious. However, the skill expands trust to third-party tooling and another skill, forwards local auth/credentials to those tools, and enables automated external actions (draft upload and git push), making the footprint broader and riskier than a simple writing helper.

The code appears to be a legitimate WeChat comment-fetching utility rather than malware. Its critical security weakness is that an attacker-controlled --url causes the authenticated Cookie header to be sent to that URL, enabling session-cookie theft. Users should restrict the URL to the intended mp.weixin.qq.com endpoint, avoid passing cookies on the command line, and escape untrusted content before rendering Markdown.