wxmp-workflow

SUSPICIOUS: the workflow is largely aligned with a WeChat publishing skill, but it combines credential access, opaque bash-script API calls, and autonomous publishing actions. The main concern is not obvious malware, but hidden script behavior and real-world posting capability with account credentials.