wx-favorites-report

SUSPICIOUS. The skill is internally coherent for reverse-engineering WeChat favorites, and its installs come from standard official sources, so this is not confirmed malware. But its actual footprint is high-impact: it bypasses app protections, captures encryption keys from process memory, decrypts private local data, and writes sensitive artifacts to disk. Those capabilities are proportionate only to a forensic/research use case, not a typical visualization skill, making the overall security risk high despite limited external exfiltration.