wxmp-article-harvester

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most of these are legitimate mp.weixin.qq.com article/image endpoints used by the skill, but one entry is a typosquatting host (mp.weixin.qq.com.evil.example) and the direct GitHub install-from-commit URL is a supply‑chain risk if the repo/commit is not trusted.