# Analyze Your Local WeChat Archive

WeChat Mac data is encrypted and difficult to search or export. This skill builds a local vault for authorized queries, exports, and summaries.

## Install

```bash
npx skillstore add mcncarl/wechat-local-vault
```

## Metadata

- Status: approved
- Slug: mcncarl-wechat-local-vault
- Skillstore revision: r1
- Version status: missing
- Tree hash: a2f3d1a74a972b447cb69087a9fc055240abb726ac2cb7f78848ee8120ebfd71
- Author: mcncarl
- GitHub username: mcncarl
- License: MIT
- Repository: https://github.com/mcncarl/yichen-skills/tree/main/wechat-local-vault/
- Ref: c0271103e9d6ff62c5aa5b85e8fbc03aad6fc662
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: filesystem, env\_access, external\_commands
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/mcncarl-wechat-local-vault
- Manifest: https://skillstore.pages.dev/api/skills/mcncarl-wechat-local-vault/manifest

## Capabilities

- Extracts and matches SQLCipher keys from an authorized local WeChat Mac installation.
- Performs full or incremental decryption of known WeChat databases.
- Searches chats by conversation, keyword, time range, and message type.
- Lists contacts, group members, sessions, unread messages, and message statistics.
- Exports selected conversations as readable Markdown or text reports.
- Builds source packages for group digests, Moments searches, and Favorites review.

## Use Cases

- Review a Personal Conversation: Export one authorized conversation and analyze its timeline, tone, decisions, and follow-up items.
- Prepare a Group Digest: Create a bounded source package and summarize topics, participation, decisions, and unresolved questions.
- Track Customer Follow-Ups: Search authorized customer chats for commitments, unanswered questions, and recent activity within a defined period.

## Prompt Templates

### Check Vault Status

```
Check my authorized local WeChat vault status. Report available databases, missing keys, data freshness, and privacy-sensitive output locations.
```

### Export One Conversation

```
Export my conversation with [contact or group] from [start date] to [end date]. Use the smallest necessary scope and save a readable report.
```

### Create a Group Digest

```
Build a digest source package for [group] covering [date range]. Summarize major topics, decisions, contributors, and unresolved items without exposing unnecessary messages.
```

### Analyze Follow-Up Risk

```
Search authorized chats with [customer] for the last [period]. Identify commitments, unanswered questions, sentiment changes, and recommended follow-ups with supporting dates.
```

## Limitations

- Supports WeChat Mac 4.x database layouts and may fail after application updates.
- Requires local access, suitable permissions, Frida, and cryptographic dependencies.
- Processes highly sensitive messages and keys without hardware-backed secret storage.
- Image contents require separate descriptions and are not inferred from database metadata.

## Best Practices

- Confirm ownership and authorization before accessing any WeChat account or conversation.
- Use narrow contacts and date ranges before full decryption or broad exports.
- Keep keys, plaintext databases, and reports in private local directories with restrictive permissions.

## Anti Patterns

- Do not inspect another person's account, device, or conversations without explicit authorization.
- Do not place plaintext databases or reusable keys in shared folders, repositories, or cloud storage.
- Do not request full archives when a bounded conversation or date range answers the question.

## Security Audit

- Audited at: 2026-07-11T04:11:27.773\+00:00
- Summary: The skill intentionally instruments WeChat, captures reusable cryptographic material, decrypts private databases, and exports plaintext conversation data. No application exfiltration was found, but unsafe temporary storage, plaintext keys, generated-source injection, and broad host modifications create serious local risk.

## Stats

- Views: 1
- Downloads: 13
- Favorites: 1
- Popularity score: 0