wxmini-security-audit

SUSPICIOUS. The skill's stated purpose broadly matches its capabilities, but the trust chain is not coherent: the claimed publisher, documented repo source, and required external decompiler binary do not line up cleanly. No direct credential theft or exfiltration is evident, but the unverifiable executable dependency and AI-enabled security-audit scope make this a high security-risk skill rather than benign.