Wechat API Lite

微信公众号 API 轻量化工具 — 凭证获取、素材上传、草稿创建，主打最小化依赖和零冗余

This package appears to implement only the WeChat Official Account API calls advertised, but the registry metadata incorrectly lists no required environment variables while the code and SKILL.md require WECHAT_APP_ID and WECHAT_APP_SECRET in a local config.env. Before installing: (1) verify the skill's provenance — there is no homepage and the source is 'unknown'; prefer packages from known authors. (2) Create the config.env only under the skill directory and set file permissions so others can't read it (it contains your AppID/AppSecret). (3) Use a least-privileged / test WeChat account when first trying it. (4) Inspect the script locally (you already have it) and consider running it in an isolated environment; it only calls api.weixin.qq.com and writes a .token_cache file under the skill folder. (5) If you plan to publish or back up your home directory, ensure config.env is excluded (.gitignore noted in example). If you need assurance, contact the package author to correct the registry metadata so required credentials are declared explicitly.