configure

SUSPICIOUS: the skill’s purpose mostly matches its behavior, but it executes unverified plugin-cache scripts and permits custom API endpoint changes. Data flow to the official WeChat domain is coherent, so this is not confirmed malware, but the execution trust model makes it medium risk.