wxwork-drive

SUSPICIOUS. The business function is coherent, but the trust model is not: a minimally documented local wrapper reads raw enterprise credentials from `daemon.env` and sends them, plus file content, through a third-party relay outside the official WeChat Work API path. Because the core executable provenance is not documented or verifiable here, and it receives credentials, this skill carries high security risk even without proof of malicious intent.