Skills wechat-local-vault
๐ฆ
wechat-local-vault
Content revision r1 Critical ๐ Filesystem access๐ Env variablesโ๏ธ External commands
Analyze Your Local WeChat Archive
WeChat Mac data is encrypted and difficult to search or export. This skill builds a local vault for authorized queries, exports, and summaries.
Supports: Claude Codex Code(CC)
Do not auto-install this skill.
The canonical policy requires operator review before any installation action.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "wechat-local-vault" from https://skillstore.io/skills/mcncarl-wechat-local-vault.md and its manifest at https://skillstore.io/api/skills/mcncarl-wechat-local-vault/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "wechat-local-vault". Check the local vault status and show only operational details.
Expected outcome:
- Eight known databases are available, and two require updated keys.
- The latest successful refresh completed today.
- Plaintext data remains in the configured private vault.
Using "wechat-local-vault". Summarize the selected group between May 1 and May 7.
Expected outcome:
The digest covers 246 messages across four main topics. It lists two decisions, three open questions, and the most active contributors.
Using "wechat-local-vault". Find pending customer follow-ups from the last 30 days.
Expected outcome:
Three follow-ups remain open. Each item includes the conversation date, the stated commitment, current status, and a concise reply recommendation.
Security Audit
Criticalv3 โข 7/11/2026 Open versioned report
The skill intentionally instruments WeChat, captures reusable cryptographic material, decrypts private databases, and exports plaintext conversation data. No application exfiltration was found, but unsafe temporary storage, plaintext keys, generated-source injection, and broad host modifications create serious local risk.
9
Files scanned
3,885
Lines analyzed
27
Review items
0
False positives ignored
Confirmed security concerns (83)
Critical
Process Instrumentation Captures Cryptographic Secrets
Frida hooks WeChat key derivation, reads passwords and derived keys from process memory, and records them for database decryption.
The hook explicitly reads password and derived-key pointers, then attaches to or spawns WeChat. The credential extraction intent is direct.
High
Captured Secrets Persist in a Predictable Temporary Log
Captured passwords, salts, and derived keys are appended to /tmp/wechat_frida_keys.log. Reuse mode preserves the log without enforcing restrictive permissions.
The embedded hook appends full capture records to a fixed /tmp path. The command option confirms that the log can remain for later reuse.
High
Reusable Database Keys Are Stored Unencrypted
Matched SQLCipher keys are saved as plaintext JSON in the user configuration directory. File mode 0600 does not provide encryption at rest.
The matched key dictionary is passed directly to JSON serialization. The only protection applied is a filesystem permission change.
High
User-Controlled Path Is Inserted Into Executed Python Source
The --wechat-copy path is inserted into a generated Python string without escaping. A crafted existing path can alter the temporary host program before execution.
The path originates from an unrestricted command-line argument and replaces text inside a quoted Python assignment. The resulting source is executed by the interpreter.
Medium
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Show all 83 confirmed findings
Medium
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
if name.endswith(".db") and "/" in name:
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
for path in sorted(db_base.rglob("*.db")):
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
wxid, db_base = find_db_base(args.db_base)
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": os.path.join(db_base, "sns", "sns.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
return os.path.join(tmp_dir, "contact.db"), os.path.join(tmp_dir, "sns.db")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
return sorted((decrypted_dir / "message").glob("message_*.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
session_db = decrypted_dir / "session/session.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"ๆพไธๅฐ session.db,่ฏทๅ
ๅข้ๆๅ
จ้่งฃๅฏ: {session_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit("session.db ไธญๆฒกๆ SessionTable")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
fav_db = decrypted_dir / "favorite/favorite.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"ๆพไธๅฐ favorite.db: {fav_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit("favorite.db ไธญๆฒกๆ fav_db_item")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
sns_db = decrypted_dir / "sns/sns.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"ๆพไธๅฐ sns.db: {sns_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": os.path.join(db_base, "session", "session.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(paths[name], key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
ไผๅ
ไฝฟ็จๅทฒ่งฃๅฏ็ `sns/sns.db`ใ`favorite/favorite.db`ใ`message_resource.db`ใ็ผบ key ๆถๅช่กฅ็ธๅ
ณๅบ,ไธๅ
จ้ๆๅใ่พๅบๅฐ็จๆท้
็ฝฎ็ๅฏผๅบ็ฎๅฝใ
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Low
System reconnaissance
wxid = config.get("wxid")
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
).expanduser() / wxid / "db_storage"
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
pid = device.spawn([WECHAT_PATH])
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
pid = ATTACH_PID
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
wxid = db_base.parts[-2] if db_base.name == "db_storage" else db_base.name
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
wxid = config.get("wxid") or db_base.parts[-2]
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
attach_pid = find_running_process(str(wechat_binary)) if mode == "attach" else 0
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
config["wxid"] = wxid
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Capability review items (27)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file in home directory
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Process spawn
pid = device.spawn([WECHAT_PATH])
Frida spawns and attaches to a signed WeChat executable to intercept key derivation. This is invasive process instrumentation with direct access to secrets.
High
Python subprocess.run
result = subprocess.run(cmd, capture_output=True, text=True)
This wrapper runs pip, codesign, and pgrep commands. Arguments use list form, but the commands install software and modify a copied application.
High
Python subprocess.run
subprocess.run([sys.executable, host_path], check=True)
This executes a generated Python host script that attaches Frida to WeChat. The script includes raw string substitutions and handles captured cryptographic material.
High
Hidden file in home directory
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Temp directory access
FRIDA_LOG = Path("/tmp/wechat_frida_keys.log")
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
Temp directory access
parser.add_argument("--reuse-log", action="store_true", help="Do not delete /tmp/wechat_frida_keys.l
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
Hidden file in home directory
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Python file write/append
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
Hidden file in home directory
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Python file write/append
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
Hidden file in home directory
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Python file write/append
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
Hidden file in home directory
2. ๅฆๆ `~/.config/wechat-keys.json` ๅทฒๆ key,ๅ
็จ `--match-only --targets all --reuse-log` ๅฐ่ฏๅค็จใ
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
2. ๅฆๆ `~/.config/wechat-keys.json` ๅทฒๆ key,ๅ
็จ `--match-only --targets all --reuse-log` ๅฐ่ฏๅค็จใ
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
Medium
Python shutil operations
shutil.rmtree(out_base)
The --clean option recursively deletes the user-selected output path without a vault-boundary check. A mistaken path can destroy unrelated files.
Medium
Python shutil operations
shutil.copytree(WECHAT_APP, copy_path, symlinks=True)
The script copies the complete WeChat application before ad-hoc signing it. This is deliberate host modification with substantial filesystem impact.
Medium
Python file write/append
with open(report_path, "w", encoding="utf-8") as f:
This writes a readable report containing private conversation content to a configured directory. The operation is expected but creates a confidentiality risk.
Medium
Python file write/append
with open(report_path, "w", encoding="utf-8") as f:
This writes a readable report containing private conversation content to a configured directory. The operation is expected but creates a confidentiality risk.
Low
Python glob/pattern matching
dirs = sorted(glob.glob(str(WECHAT_BASE / "*/db_storage")))
The glob enumerates WeChat account database directories and derives a local account identifier. This is intentional local data discovery.
Risk Factors
๐ Filesystem access (50)
scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:229 scripts/decrypt_all_dbs.py:69 scripts/decrypt_all_dbs.py:73 scripts/decrypt_all_dbs.py:83 scripts/export_chat.py:26 scripts/export_chat.py:26 scripts/export_chat.py:72 scripts/export_chat.py:76 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:28 scripts/extract_keys.py:635 scripts/extract_keys.py:19 scripts/extract_keys.py:431 scripts/extract_keys.py:319 scripts/extract_keys.py:283 scripts/extract_keys.py:441 scripts/extract_keys.py:339 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:68 scripts/list_contacts.py:100 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:75 scripts/search_sns.py:83 scripts/vault_cli.py:29 scripts/vault_cli.py:29 scripts/vault_cli.py:94 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16 scripts/wechat_digest.py:61 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16
๐ Env variables (19)
scripts/decrypt_all_dbs.py:93 scripts/decrypt_all_dbs.py:95 scripts/export_chat.py:83 scripts/export_chat.py:84 scripts/extract_keys.py:334 scripts/extract_keys.py:336 scripts/list_contacts.py:31 scripts/list_contacts.py:33 scripts/search_sns.py:43 scripts/search_sns.py:45 scripts/vault_cli.py:105 scripts/vault_cli.py:110 scripts/vault_cli.py:115 scripts/vault_cli.py:117 scripts/wechat_digest.py:54 scripts/wechat_digest.py:56 scripts/wechat_digest.py:67 scripts/wechat_digest.py:295 scripts/wechat_digest.py:296
โ๏ธ External commands (50)
scripts/extract_keys.py:218 scripts/extract_keys.py:256 scripts/extract_keys.py:436 scripts/wechat_digest.py:334 SKILL.md:9 SKILL.md:32 SKILL.md:33 SKILL.md:37 SKILL.md:39-52 SKILL.md:52-54 SKILL.md:54 SKILL.md:60-63 SKILL.md:63-65 SKILL.md:65-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:70-71 SKILL.md:71-73 SKILL.md:73-79 SKILL.md:79-81 SKILL.md:81-85 SKILL.md:85-87 SKILL.md:87-91 SKILL.md:91-93 SKILL.md:93-97 SKILL.md:97-99 SKILL.md:99-103 SKILL.md:103-105 SKILL.md:105-109 SKILL.md:109-111 SKILL.md:111-115 SKILL.md:115-117 SKILL.md:117-121 SKILL.md:121-123 SKILL.md:123-125 SKILL.md:125-133 SKILL.md:133-134 SKILL.md:134 SKILL.md:136-143 SKILL.md:143-144 SKILL.md:144-146 SKILL.md:146-152 SKILL.md:152-153 SKILL.md:153-159 SKILL.md:159 SKILL.md:164 SKILL.md:165-166 SKILL.md:166 SKILL.md:169-170
Detected Patterns
System reconnaissanceร8
Audited by: codex View Audit History โ
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/mcncarl-wechat-local-vault/audits/3?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/mcncarl-wechat-local-vault?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/mcncarl-wechat-local-vault?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/mcncarl-wechat-local-vault/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/mcncarl-wechat-local-vault.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA ยท BibTeX ยท CFF)
APA citation
mcncarl. (2026). wechat-local-vault security audit report (audit version 3) [Author version unspecified]. Skillstore. https://skillstore.io/skills/mcncarl-wechat-local-vault/audits/3BibTeX citation
@techreport{mcncarl-mcncarl-wechat-local-vault-2026,
author = {mcncarl},
title = {wechat-local-vault security audit report (audit version 3)},
institution = {Skillstore},
year = {2026},
number = {3},
url = {https://skillstore.io/skills/mcncarl-wechat-local-vault/audits/3},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wechat-local-vault security audit report (audit version 3)"
version: "unspecified"
type: report
authors:
- name: "mcncarl"
date-released: "2026-07-11"
url: "https://skillstore.io/skills/mcncarl-wechat-local-vault/audits/3"
identifiers:
- type: other
value: "skillstore:mcncarl-wechat-local-vault:audit:3"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 59
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance
What You Can Build
Review a Personal Conversation
Export one authorized conversation and analyze its timeline, tone, decisions, and follow-up items.
Prepare a Group Digest
Create a bounded source package and summarize topics, participation, decisions, and unresolved questions.
Track Customer Follow-Ups
Search authorized customer chats for commitments, unanswered questions, and recent activity within a defined period.
Try These Prompts
Check Vault Status
Check my authorized local WeChat vault status. Report available databases, missing keys, data freshness, and privacy-sensitive output locations.
Export One Conversation
Export my conversation with [contact or group] from [start date] to [end date]. Use the smallest necessary scope and save a readable report.
Create a Group Digest
Build a digest source package for [group] covering [date range]. Summarize major topics, decisions, contributors, and unresolved items without exposing unnecessary messages.
Analyze Follow-Up Risk
Search authorized chats with [customer] for the last [period]. Identify commitments, unanswered questions, sentiment changes, and recommended follow-ups with supporting dates.
Best Practices
- Confirm ownership and authorization before accessing any WeChat account or conversation.
- Use narrow contacts and date ranges before full decryption or broad exports.
- Keep keys, plaintext databases, and reports in private local directories with restrictive permissions.
Avoid
- Do not inspect another person's account, device, or conversations without explicit authorization.
- Do not place plaintext databases or reusable keys in shared folders, repositories, or cloud storage.
- Do not request full archives when a bounded conversation or date range answers the question.
Frequently Asked Questions
Which WeChat versions are supported?
The scripts target WeChat Mac 4.x layouts. Application updates can change database schemas or key derivation behavior.
Does the skill send data over the network?
No application network requests were found. Dependency installation can contact Python package repositories when required packages are missing.
Where are decrypted databases stored?
The default vault is under the local Application Support directory. Configuration can select another local path.
Can it read image contents?
No. It can index image messages, but summaries require separate image descriptions to describe visual content.
Is key extraction safe?
It instruments a signed WeChat copy and captures cryptographic material. Run it only on an authorized device after reviewing the security warnings.
Can it update only recent data?
Yes. Incremental mode skips unchanged databases and can export selected conversations from a specified time.
Developer Details
Author
mcncarlLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
c0271103e9d6ff62c5aa5b85e8fbc03aad6fc662
Maintenance freshness
7/18/2026
Usage
8 downloads ยท 1 views
File structure
๐ scripts/
๐ decrypt_all_dbs.py
๐ export_chat.py
๐ extract_keys.py
๐ list_contacts.py
๐ search_sns.py
๐ vault_cli.py
๐ wechat_digest.py
๐ README.md
๐ SKILL.md