wechat-cell-writer

SUSPICIOUS. The article-writing and image workflow is broadly aligned with the stated purpose, but the trust boundary is too wide: WeChat credentials are prepared for use by a non-official posting skill, and execution relies on runtime package/browser downloads plus several companion skills. This looks more like a risky third-party automation stack than clear malware, with the main concern being credential forwarding and expanded supply-chain trust rather than overt exfiltration.