Skills wechat-local-vault
๐Ÿ“ฆ

wechat-local-vault

Content revision r1 Critical ๐Ÿ“ Filesystem access๐Ÿ”‘ Env variablesโš™๏ธ External commands

Analyze Your Local WeChat Archive

WeChat Mac data is encrypted and difficult to search or export. This skill builds a local vault for authorized queries, exports, and summaries.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "wechat-local-vault" from https://skillstore.io/skills/mcncarl-wechat-local-vault.md and its manifest at https://skillstore.io/api/skills/mcncarl-wechat-local-vault/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/mcncarl-wechat-local-vault.md Signed manifest GET /api/skills/mcncarl-wechat-local-vault/manifest Signed lockfile GET /api/skills/mcncarl-wechat-local-vault/lockfile

Test it

Using "wechat-local-vault". Check the local vault status and show only operational details.

Expected outcome:

  • Eight known databases are available, and two require updated keys.
  • The latest successful refresh completed today.
  • Plaintext data remains in the configured private vault.

Using "wechat-local-vault". Summarize the selected group between May 1 and May 7.

Expected outcome:

The digest covers 246 messages across four main topics. It lists two decisions, three open questions, and the most active contributors.

Using "wechat-local-vault". Find pending customer follow-ups from the last 30 days.

Expected outcome:

Three follow-ups remain open. Each item includes the conversation date, the stated commitment, current status, and a concise reply recommendation.

Security Audit

Critical
v3 โ€ข 7/11/2026 Open versioned report

The skill intentionally instruments WeChat, captures reusable cryptographic material, decrypts private databases, and exports plaintext conversation data. No application exfiltration was found, but unsafe temporary storage, plaintext keys, generated-source injection, and broad host modifications create serious local risk.

9
Files scanned
3,885
Lines analyzed
27
Review items
0
False positives ignored

Confirmed security concerns (83)

Critical
scripts/extract_keys.py:97-135scripts/extract_keys.py:214-232
Process Instrumentation Captures Cryptographic Secrets
Frida hooks WeChat key derivation, reads passwords and derived keys from process memory, and records them for database decryption.
The hook explicitly reads password and derived-key pointers, then attaches to or spawns WeChat. The credential extraction intent is direct.
High
scripts/extract_keys.py:78-84scripts/extract_keys.py:408-409scripts/extract_keys.py:635
Captured Secrets Persist in a Predictable Temporary Log
Captured passwords, salts, and derived keys are appended to /tmp/wechat_frida_keys.log. Reuse mode preserves the log without enforcing restrictive permissions.
The embedded hook appends full capture records to a fixed /tmp path. The command option confirms that the log can remain for later reuse.
High
scripts/extract_keys.py:278-283scripts/extract_keys.py:669-674
Reusable Database Keys Are Stored Unencrypted
Matched SQLCipher keys are saved as plaintext JSON in the user configuration directory. File mode 0600 does not provide encryption at rest.
The matched key dictionary is passed directly to JSON serialization. The only protection applied is a filesystem permission change.
High
scripts/extract_keys.py:421-436scripts/extract_keys.py:633-660
User-Controlled Path Is Inserted Into Executed Python Source
The --wechat-copy path is inserted into a generated Python string without escaping. A crafted existing path can alter the temporary host program before execution.
The path originates from an unrestricted command-line argument and replaces text inside a quoted Python assignment. The resulting source is executed by the interpreter.
Medium
scripts/decrypt_all_dbs.py:39
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:40
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:41
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:42
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Show all 83 confirmed findings
Medium
scripts/decrypt_all_dbs.py:43
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:44
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:45
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:46
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:47
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:48
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/decrypt_all_dbs.py:108
SQLite database file
if name.endswith(".db") and "/" in name:
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/export_chat.py:33
SQLite database file
"message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/export_chat.py:34
SQLite database file
"message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/export_chat.py:35
SQLite database file
"message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/export_chat.py:36
SQLite database file
"message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/export_chat.py:109
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:39
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:40
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:41
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:42
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:43
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:44
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:45
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:46
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:47
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:48
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:357
SQLite database file
for path in sorted(db_base.rglob("*.db")):
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/extract_keys.py:646
SQLite database file
wxid, db_base = find_db_base(args.db_base)
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/list_contacts.py:103
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/list_contacts.py:104
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/list_contacts.py:109
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/list_contacts.py:111
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/list_contacts.py:112
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/list_contacts.py:113
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/search_sns.py:86
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/search_sns.py:87
SQLite database file
"sns": os.path.join(db_base, "sns", "sns.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/search_sns.py:95
SQLite database file
decrypt_db(path, key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/search_sns.py:97
SQLite database file
return os.path.join(tmp_dir, "contact.db"), os.path.join(tmp_dir, "sns.db")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:219
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:284
SQLite database file
return sorted((decrypted_dir / "message").glob("message_*.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:541
SQLite database file
"contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:542
SQLite database file
"session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:543
SQLite database file
"sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:544
SQLite database file
"favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:545
SQLite database file
"message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:564
SQLite database file
session_db = decrypted_dir / "session/session.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:566
SQLite database file
raise SystemExit(f"ๆ‰พไธๅˆฐ session.db,่ฏทๅ…ˆๅขž้‡ๆˆ–ๅ…จ้‡่งฃๅฏ†: {session_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:571
SQLite database file
raise SystemExit("session.db ไธญๆฒกๆœ‰ SessionTable")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:703
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:1097
SQLite database file
fav_db = decrypted_dir / "favorite/favorite.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:1099
SQLite database file
raise SystemExit(f"ๆ‰พไธๅˆฐ favorite.db: {fav_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:1113
SQLite database file
raise SystemExit("favorite.db ไธญๆฒกๆœ‰ fav_db_item")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:1188
SQLite database file
sns_db = decrypted_dir / "sns/sns.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/vault_cli.py:1190
SQLite database file
raise SystemExit(f"ๆ‰พไธๅˆฐ sns.db: {sns_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:223
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:224
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:229
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:231
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:232
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:233
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:348
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:349
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:350
SQLite database file
"session": os.path.join(db_base, "session", "session.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:355
SQLite database file
decrypt_db(paths[name], key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:370
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:371
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:372
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:414
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:415
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
scripts/wechat_digest.py:416
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SKILL.md:159
SQLite database file
ไผ˜ๅ…ˆไฝฟ็”จๅทฒ่งฃๅฏ†็š„ `sns/sns.db`ใ€`favorite/favorite.db`ใ€`message_resource.db`ใ€‚็ผบ key ๆ—ถๅช่กฅ็›ธๅ…ณๅบ“,ไธๅ…จ้‡ๆŠ“ๅ–ใ€‚่พ“ๅ‡บๅˆฐ็”จๆˆท้…็ฝฎ็š„ๅฏผๅ‡บ็›ฎๅฝ•ใ€‚
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Low
scripts/decrypt_all_dbs.py:95
System reconnaissance
wxid = config.get("wxid")
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
scripts/decrypt_all_dbs.py:99
System reconnaissance
).expanduser() / wxid / "db_storage"
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
scripts/extract_keys.py:218
System reconnaissance
pid = device.spawn([WECHAT_PATH])
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
scripts/extract_keys.py:224
System reconnaissance
pid = ATTACH_PID
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
scripts/extract_keys.py:330
System reconnaissance
wxid = db_base.parts[-2] if db_base.name == "db_storage" else db_base.name
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
scripts/extract_keys.py:336
System reconnaissance
wxid = config.get("wxid") or db_base.parts[-2]
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
scripts/extract_keys.py:414
System reconnaissance
attach_pid = find_running_process(str(wechat_binary)) if mode == "attach" else 0
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
scripts/extract_keys.py:606-607
System reconnaissance
config["wxid"] = wxid
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Capability review items (27)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
scripts/decrypt_all_dbs.py:7
Hidden file in home directory
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/decrypt_all_dbs.py:33
Hidden file in home directory
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/decrypt_all_dbs.py:7
Hidden file access
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/decrypt_all_dbs.py:33
Hidden file access
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/extract_keys.py:218
Process spawn
pid = device.spawn([WECHAT_PATH])
Frida spawns and attaches to a signed WeChat executable to intercept key derivation. This is invasive process instrumentation with direct access to secrets.
High
scripts/extract_keys.py:256
Python subprocess.run
result = subprocess.run(cmd, capture_output=True, text=True)
This wrapper runs pip, codesign, and pgrep commands. Arguments use list form, but the commands install software and modify a copied application.
High
scripts/extract_keys.py:436
Python subprocess.run
subprocess.run([sys.executable, host_path], check=True)
This executes a generated Python host script that attaches Frida to WeChat. The script includes raw string substitutions and handles captured cryptographic material.
High
scripts/extract_keys.py:24
Hidden file in home directory
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/extract_keys.py:24
Hidden file access
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/extract_keys.py:28
Temp directory access
FRIDA_LOG = Path("/tmp/wechat_frida_keys.log")
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
scripts/extract_keys.py:635
Temp directory access
parser.add_argument("--reuse-log", action="store_true", help="Do not delete /tmp/wechat_frida_keys.l
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
scripts/list_contacts.py:14
Hidden file in home directory
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/list_contacts.py:14
Hidden file access
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/list_contacts.py:68
Python file write/append
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
scripts/search_sns.py:25
Hidden file in home directory
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/search_sns.py:25
Hidden file access
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/search_sns.py:75
Python file write/append
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
scripts/wechat_digest.py:15
Hidden file in home directory
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/wechat_digest.py:15
Hidden file access
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
scripts/wechat_digest.py:99
Python file write/append
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
SKILL.md:134
Hidden file in home directory
2. ๅฆ‚ๆžœ `~/.config/wechat-keys.json` ๅทฒๆœ‰ key,ๅ…ˆ็”จ `--match-only --targets all --reuse-log` ๅฐ่ฏ•ๅค็”จใ€‚
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
SKILL.md:134
Hidden file access
2. ๅฆ‚ๆžœ `~/.config/wechat-keys.json` ๅทฒๆœ‰ key,ๅ…ˆ็”จ `--match-only --targets all --reuse-log` ๅฐ่ฏ•ๅค็”จใ€‚
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
Medium
scripts/decrypt_all_dbs.py:229
Python shutil operations
shutil.rmtree(out_base)
The --clean option recursively deletes the user-selected output path without a vault-boundary check. A mistaken path can destroy unrelated files.
Medium
scripts/extract_keys.py:319
Python shutil operations
shutil.copytree(WECHAT_APP, copy_path, symlinks=True)
The script copies the complete WeChat application before ad-hoc signing it. This is deliberate host modification with substantial filesystem impact.
Medium
scripts/wechat_digest.py:394
Python file write/append
with open(report_path, "w", encoding="utf-8") as f:
This writes a readable report containing private conversation content to a configured directory. The operation is expected but creates a confidentiality risk.
Medium
scripts/wechat_digest.py:430
Python file write/append
with open(report_path, "w", encoding="utf-8") as f:
This writes a readable report containing private conversation content to a configured directory. The operation is expected but creates a confidentiality risk.
Low
scripts/extract_keys.py:339
Python glob/pattern matching
dirs = sorted(glob.glob(str(WECHAT_BASE / "*/db_storage")))
The glob enumerates WeChat account database directories and derives a local account identifier. This is intentional local data discovery.

Risk Factors

๐Ÿ“ Filesystem access (50)
scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:229 scripts/decrypt_all_dbs.py:69 scripts/decrypt_all_dbs.py:73 scripts/decrypt_all_dbs.py:83 scripts/export_chat.py:26 scripts/export_chat.py:26 scripts/export_chat.py:72 scripts/export_chat.py:76 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:28 scripts/extract_keys.py:635 scripts/extract_keys.py:19 scripts/extract_keys.py:431 scripts/extract_keys.py:319 scripts/extract_keys.py:283 scripts/extract_keys.py:441 scripts/extract_keys.py:339 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:68 scripts/list_contacts.py:100 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:75 scripts/search_sns.py:83 scripts/vault_cli.py:29 scripts/vault_cli.py:29 scripts/vault_cli.py:94 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16 scripts/wechat_digest.py:61 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16
๐Ÿ”‘ Env variables (19)
scripts/decrypt_all_dbs.py:93 scripts/decrypt_all_dbs.py:95 scripts/export_chat.py:83 scripts/export_chat.py:84 scripts/extract_keys.py:334 scripts/extract_keys.py:336 scripts/list_contacts.py:31 scripts/list_contacts.py:33 scripts/search_sns.py:43 scripts/search_sns.py:45 scripts/vault_cli.py:105 scripts/vault_cli.py:110 scripts/vault_cli.py:115 scripts/vault_cli.py:117 scripts/wechat_digest.py:54 scripts/wechat_digest.py:56 scripts/wechat_digest.py:67 scripts/wechat_digest.py:295 scripts/wechat_digest.py:296
โš™๏ธ External commands (50)
scripts/extract_keys.py:218 scripts/extract_keys.py:256 scripts/extract_keys.py:436 scripts/wechat_digest.py:334 SKILL.md:9 SKILL.md:32 SKILL.md:33 SKILL.md:37 SKILL.md:39-52 SKILL.md:52-54 SKILL.md:54 SKILL.md:60-63 SKILL.md:63-65 SKILL.md:65-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:70-71 SKILL.md:71-73 SKILL.md:73-79 SKILL.md:79-81 SKILL.md:81-85 SKILL.md:85-87 SKILL.md:87-91 SKILL.md:91-93 SKILL.md:93-97 SKILL.md:97-99 SKILL.md:99-103 SKILL.md:103-105 SKILL.md:105-109 SKILL.md:109-111 SKILL.md:111-115 SKILL.md:115-117 SKILL.md:117-121 SKILL.md:121-123 SKILL.md:123-125 SKILL.md:125-133 SKILL.md:133-134 SKILL.md:134 SKILL.md:136-143 SKILL.md:143-144 SKILL.md:144-146 SKILL.md:146-152 SKILL.md:152-153 SKILL.md:153-159 SKILL.md:159 SKILL.md:164 SKILL.md:165-166 SKILL.md:166 SKILL.md:169-170

Detected Patterns

System reconnaissanceร—8
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/mcncarl-wechat-local-vault/audits/3?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/mcncarl-wechat-local-vault/security.svg)](https://skillstore.io/skills/mcncarl-wechat-local-vault?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/mcncarl-wechat-local-vault?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/mcncarl-wechat-local-vault/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/mcncarl-wechat-local-vault.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

mcncarl. (2026). wechat-local-vault security audit report (audit version 3) [Author version unspecified]. Skillstore. https://skillstore.io/skills/mcncarl-wechat-local-vault/audits/3

BibTeX citation

@techreport{mcncarl-mcncarl-wechat-local-vault-2026, author = {mcncarl}, title = {wechat-local-vault security audit report (audit version 3)}, institution = {Skillstore}, year = {2026}, number = {3}, url = {https://skillstore.io/skills/mcncarl-wechat-local-vault/audits/3}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "wechat-local-vault security audit report (audit version 3)" version: "unspecified" type: report authors: - name: "mcncarl" date-released: "2026-07-11" url: "https://skillstore.io/skills/mcncarl-wechat-local-vault/audits/3" identifiers: - type: other value: "skillstore:mcncarl-wechat-local-vault:audit:3" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
59
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Review a Personal Conversation

Export one authorized conversation and analyze its timeline, tone, decisions, and follow-up items.

Prepare a Group Digest

Create a bounded source package and summarize topics, participation, decisions, and unresolved questions.

Track Customer Follow-Ups

Search authorized customer chats for commitments, unanswered questions, and recent activity within a defined period.

Try These Prompts

Check Vault Status 
Check my authorized local WeChat vault status. Report available databases, missing keys, data freshness, and privacy-sensitive output locations.
Export One Conversation 
Export my conversation with [contact or group] from [start date] to [end date]. Use the smallest necessary scope and save a readable report.
Create a Group Digest 
Build a digest source package for [group] covering [date range]. Summarize major topics, decisions, contributors, and unresolved items without exposing unnecessary messages.
Analyze Follow-Up Risk 
Search authorized chats with [customer] for the last [period]. Identify commitments, unanswered questions, sentiment changes, and recommended follow-ups with supporting dates.

Best Practices

  • Confirm ownership and authorization before accessing any WeChat account or conversation.
  • Use narrow contacts and date ranges before full decryption or broad exports.
  • Keep keys, plaintext databases, and reports in private local directories with restrictive permissions.

Avoid

  • Do not inspect another person's account, device, or conversations without explicit authorization.
  • Do not place plaintext databases or reusable keys in shared folders, repositories, or cloud storage.
  • Do not request full archives when a bounded conversation or date range answers the question.

Frequently Asked Questions

Which WeChat versions are supported?
The scripts target WeChat Mac 4.x layouts. Application updates can change database schemas or key derivation behavior.
Does the skill send data over the network?
No application network requests were found. Dependency installation can contact Python package repositories when required packages are missing.
Where are decrypted databases stored?
The default vault is under the local Application Support directory. Configuration can select another local path.
Can it read image contents?
No. It can index image messages, but summaries require separate image descriptions to describe visual content.
Is key extraction safe?
It instruments a signed WeChat copy and captures cryptographic material. Run it only on an authorized device after reviewing the security warnings.
Can it update only recent data?
Yes. Incremental mode skips unchanged databases and can export selected conversations from a specified time.

Developer Details

Author

mcncarl

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/mcncarl/yichen-skills/tree/main/wechat-local-vault/

Ref

c0271103e9d6ff62c5aa5b85e8fbc03aad6fc662

Maintenance freshness

7/18/2026

Usage

8 downloads ยท 1 views

File structure

๐Ÿ“ scripts/

๐Ÿ“„ decrypt_all_dbs.py

๐Ÿ“„ export_chat.py

๐Ÿ“„ extract_keys.py

๐Ÿ“„ list_contacts.py

๐Ÿ“„ search_sns.py

๐Ÿ“„ vault_cli.py

๐Ÿ“„ wechat_digest.py

๐Ÿ“„ README.md

๐Ÿ“„ SKILL.md

Related Skills

View all