lov-wdb-cli

SUSPICIOUS. The stated purpose already targets sensitive local WeChat data, but the bigger issue is that the real instructions are encrypted, fetched/decrypted on demand, and must be followed blindly. That defeats review, introduces remote mutable behavior, and compounds with transitive skill installation and external license/login flows. Without visibility into the decrypted payload, the skill is not internally trustworthy or proportionate.

The supplied fragment is an opaque high-entropy data blob, not readable executable source. No malicious operation or security-sensitive data flow is directly observable, but the embedded opaque payload warrants review of the complete file and any code that decodes or consumes it. The conclusion is limited by the truncated and non-interpretable input.