wechat-article-downloader

SUSPICIOUS: The skill's core purpose is plausible, but its trust model is weak. It relies on a personal-domain remote MCP service for downloads and an external tool that captures WeChat credentials locally, with no official Tencent/WeChat provenance. This is not confirmed malware, but the supply-chain and credential-handling footprint is disproportionate enough to classify as suspicious/high-risk.