📦
Audit History
wechat-local-vault - 3 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 3 Latest
Jul 11, 2026, 04:11 AM
The skill intentionally instruments WeChat, captures reusable cryptographic material, decrypts private databases, and exports plaintext conversation data. No application exfiltration was found, but unsafe temporary storage, plaintext keys, generated-source injection, and broad host modifications create serious local risk.
9
Files scanned
3,885
Lines analyzed
113
Review items
0
False positives ignored
Confirmed security concerns (83)
Critical
Process Instrumentation Captures Cryptographic Secrets
Frida hooks WeChat key derivation, reads passwords and derived keys from process memory, and records them for database decryption.
The hook explicitly reads password and derived-key pointers, then attaches to or spawns WeChat. The credential extraction intent is direct.
High
Captured Secrets Persist in a Predictable Temporary Log
Captured passwords, salts, and derived keys are appended to /tmp/wechat_frida_keys.log. Reuse mode preserves the log without enforcing restrictive permissions.
The embedded hook appends full capture records to a fixed /tmp path. The command option confirms that the log can remain for later reuse.
High
Reusable Database Keys Are Stored Unencrypted
Matched SQLCipher keys are saved as plaintext JSON in the user configuration directory. File mode 0600 does not provide encryption at rest.
The matched key dictionary is passed directly to JSON serialization. The only protection applied is a filesystem permission change.
High
User-Controlled Path Is Inserted Into Executed Python Source
The --wechat-copy path is inserted into a generated Python string without escaping. A crafted existing path can alter the temporary host program before execution.
The path originates from an unrestricted command-line argument and replaces text inside a quoted Python assignment. The resulting source is executed by the interpreter.
Medium
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
if name.endswith(".db") and "/" in name:
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
for path in sorted(db_base.rglob("*.db")):
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
wxid, db_base = find_db_base(args.db_base)
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": os.path.join(db_base, "sns", "sns.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
return os.path.join(tmp_dir, "contact.db"), os.path.join(tmp_dir, "sns.db")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
return sorted((decrypted_dir / "message").glob("message_*.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
session_db = decrypted_dir / "session/session.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 session.db,请先增量或全量解密: {session_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit("session.db 中没有 SessionTable")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
fav_db = decrypted_dir / "favorite/favorite.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 favorite.db: {fav_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit("favorite.db 中没有 fav_db_item")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
sns_db = decrypted_dir / "sns/sns.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 sns.db: {sns_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": os.path.join(db_base, "session", "session.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(paths[name], key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
优先使用已解密的 `sns/sns.db`、`favorite/favorite.db`、`message_resource.db`。缺 key 时只补相关库,不全量抓取。输出到用户配置的导出目录。
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Low
System reconnaissance
wxid = config.get("wxid")
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
).expanduser() / wxid / "db_storage"
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
pid = device.spawn([WECHAT_PATH])
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
pid = ATTACH_PID
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
wxid = db_base.parts[-2] if db_base.name == "db_storage" else db_base.name
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
wxid = config.get("wxid") or db_base.parts[-2]
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
attach_pid = find_running_process(str(wechat_binary)) if mode == "attach" else 0
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
config["wxid"] = wxid
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Capability review items (27)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file in home directory · 2 occurrences
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access · 2 occurrences
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Process spawn
pid = device.spawn([WECHAT_PATH])
Frida spawns and attaches to a signed WeChat executable to intercept key derivation. This is invasive process instrumentation with direct access to secrets.
High
Python subprocess.run
result = subprocess.run(cmd, capture_output=True, text=True)
This wrapper runs pip, codesign, and pgrep commands. Arguments use list form, but the commands install software and modify a copied application.
High
Python subprocess.run
subprocess.run([sys.executable, host_path], check=True)
This executes a generated Python host script that attaches Frida to WeChat. The script includes raw string substitutions and handles captured cryptographic material.
High
Temp directory access
FRIDA_LOG = Path("/tmp/wechat_frida_keys.log")
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
Temp directory access
parser.add_argument("--reuse-log", action="store_true", help="Do not delete /tmp/wechat_frida_keys.l
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
Hidden file in home directory · 3 occurrences
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access · 3 occurrences
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Python file write/append · 3 occurrences
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
Hidden file in home directory
2. 如果 `~/.config/wechat-keys.json` 已有 key,先用 `--match-only --targets all --reuse-log` 尝试复用。
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
2. 如果 `~/.config/wechat-keys.json` 已有 key,先用 `--match-only --targets all --reuse-log` 尝试复用。
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
Medium
Python shutil operations
shutil.rmtree(out_base)
The --clean option recursively deletes the user-selected output path without a vault-boundary check. A mistaken path can destroy unrelated files.
Medium
Python shutil operations
shutil.copytree(WECHAT_APP, copy_path, symlinks=True)
The script copies the complete WeChat application before ad-hoc signing it. This is deliberate host modification with substantial filesystem impact.
Medium
Python file write/append · 2 occurrences
with open(report_path, "w", encoding="utf-8") as f:
This writes a readable report containing private conversation content to a configured directory. The operation is expected but creates a confidentiality risk.
Low
Python glob/pattern matching
dirs = sorted(glob.glob(str(WECHAT_BASE / "*/db_storage")))
The glob enumerates WeChat account database directories and derives a local account identifier. This is intentional local data discovery.
Risk Factors
📁 Filesystem access (50)
scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:229 scripts/decrypt_all_dbs.py:69 scripts/decrypt_all_dbs.py:73 scripts/decrypt_all_dbs.py:83 scripts/export_chat.py:26 scripts/export_chat.py:26 scripts/export_chat.py:72 scripts/export_chat.py:76 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:28 scripts/extract_keys.py:635 scripts/extract_keys.py:19 scripts/extract_keys.py:431 scripts/extract_keys.py:319 scripts/extract_keys.py:283 scripts/extract_keys.py:441 scripts/extract_keys.py:339 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:68 scripts/list_contacts.py:100 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:75 scripts/search_sns.py:83 scripts/vault_cli.py:29 scripts/vault_cli.py:29 scripts/vault_cli.py:94 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16 scripts/wechat_digest.py:61 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16
🔑 Env variables (19)
scripts/decrypt_all_dbs.py:93 scripts/decrypt_all_dbs.py:95 scripts/export_chat.py:83 scripts/export_chat.py:84 scripts/extract_keys.py:334 scripts/extract_keys.py:336 scripts/list_contacts.py:31 scripts/list_contacts.py:33 scripts/search_sns.py:43 scripts/search_sns.py:45 scripts/vault_cli.py:105 scripts/vault_cli.py:110 scripts/vault_cli.py:115 scripts/vault_cli.py:117 scripts/wechat_digest.py:54 scripts/wechat_digest.py:56 scripts/wechat_digest.py:67 scripts/wechat_digest.py:295 scripts/wechat_digest.py:296
⚙️ External commands (50)
scripts/extract_keys.py:218 scripts/extract_keys.py:256 scripts/extract_keys.py:436 scripts/wechat_digest.py:334 SKILL.md:9 SKILL.md:32 SKILL.md:33 SKILL.md:37 SKILL.md:39-52 SKILL.md:52-54 SKILL.md:54 SKILL.md:60-63 SKILL.md:63-65 SKILL.md:65-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:70-71 SKILL.md:71-73 SKILL.md:73-79 SKILL.md:79-81 SKILL.md:81-85 SKILL.md:85-87 SKILL.md:87-91 SKILL.md:91-93 SKILL.md:93-97 SKILL.md:97-99 SKILL.md:99-103 SKILL.md:103-105 SKILL.md:105-109 SKILL.md:109-111 SKILL.md:111-115 SKILL.md:115-117 SKILL.md:117-121 SKILL.md:121-123 SKILL.md:123-125 SKILL.md:125-133 SKILL.md:133-134 SKILL.md:134 SKILL.md:136-143 SKILL.md:143-144 SKILL.md:144-146 SKILL.md:146-152 SKILL.md:152-153 SKILL.md:153-159 SKILL.md:159 SKILL.md:164 SKILL.md:165-166 SKILL.md:166 SKILL.md:169-170
Detected Patterns
System reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissance
Audited by: codex
Jul 11, 2026, 04:11 AM
The skill intentionally instruments WeChat, captures reusable cryptographic material, decrypts private databases, and exports plaintext conversation data. No application exfiltration was found, but unsafe temporary storage, plaintext keys, generated-source injection, and broad host modifications create serious local risk.
9
Files scanned
3,885
Lines analyzed
113
Review items
0
False positives ignored
Confirmed security concerns (83)
Critical
Process Instrumentation Captures Cryptographic Secrets
Frida hooks WeChat key derivation, reads passwords and derived keys from process memory, and records them for database decryption.
The hook explicitly reads password and derived-key pointers, then attaches to or spawns WeChat. The credential extraction intent is direct.
High
Captured Secrets Persist in a Predictable Temporary Log
Captured passwords, salts, and derived keys are appended to /tmp/wechat_frida_keys.log. Reuse mode preserves the log without enforcing restrictive permissions.
The embedded hook appends full capture records to a fixed /tmp path. The command option confirms that the log can remain for later reuse.
High
Reusable Database Keys Are Stored Unencrypted
Matched SQLCipher keys are saved as plaintext JSON in the user configuration directory. File mode 0600 does not provide encryption at rest.
The matched key dictionary is passed directly to JSON serialization. The only protection applied is a filesystem permission change.
High
User-Controlled Path Is Inserted Into Executed Python Source
The --wechat-copy path is inserted into a generated Python string without escaping. A crafted existing path can alter the temporary host program before execution.
The path originates from an unrestricted command-line argument and replaces text inside a quoted Python assignment. The resulting source is executed by the interpreter.
Medium
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
if name.endswith(".db") and "/" in name:
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
for path in sorted(db_base.rglob("*.db")):
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
wxid, db_base = find_db_base(args.db_base)
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": os.path.join(db_base, "sns", "sns.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
return os.path.join(tmp_dir, "contact.db"), os.path.join(tmp_dir, "sns.db")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
return sorted((decrypted_dir / "message").glob("message_*.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
session_db = decrypted_dir / "session/session.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 session.db,请先增量或全量解密: {session_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit("session.db 中没有 SessionTable")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
fav_db = decrypted_dir / "favorite/favorite.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 favorite.db: {fav_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit("favorite.db 中没有 fav_db_item")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
sns_db = decrypted_dir / "sns/sns.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 sns.db: {sns_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": os.path.join(db_base, "session", "session.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(paths[name], key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
优先使用已解密的 `sns/sns.db`、`favorite/favorite.db`、`message_resource.db`。缺 key 时只补相关库,不全量抓取。输出到用户配置的导出目录。
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Low
System reconnaissance
wxid = config.get("wxid")
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
).expanduser() / wxid / "db_storage"
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
pid = device.spawn([WECHAT_PATH])
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
pid = ATTACH_PID
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
wxid = db_base.parts[-2] if db_base.name == "db_storage" else db_base.name
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
wxid = config.get("wxid") or db_base.parts[-2]
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
attach_pid = find_running_process(str(wechat_binary)) if mode == "attach" else 0
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
config["wxid"] = wxid
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Capability review items (27)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file in home directory · 2 occurrences
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access · 2 occurrences
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Process spawn
pid = device.spawn([WECHAT_PATH])
Frida spawns and attaches to a signed WeChat executable to intercept key derivation. This is invasive process instrumentation with direct access to secrets.
High
Python subprocess.run
result = subprocess.run(cmd, capture_output=True, text=True)
This wrapper runs pip, codesign, and pgrep commands. Arguments use list form, but the commands install software and modify a copied application.
High
Python subprocess.run
subprocess.run([sys.executable, host_path], check=True)
This executes a generated Python host script that attaches Frida to WeChat. The script includes raw string substitutions and handles captured cryptographic material.
High
Temp directory access
FRIDA_LOG = Path("/tmp/wechat_frida_keys.log")
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
Temp directory access
parser.add_argument("--reuse-log", action="store_true", help="Do not delete /tmp/wechat_frida_keys.l
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
Hidden file in home directory · 3 occurrences
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access · 3 occurrences
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Python file write/append · 3 occurrences
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
Hidden file in home directory
2. 如果 `~/.config/wechat-keys.json` 已有 key,先用 `--match-only --targets all --reuse-log` 尝试复用。
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
2. 如果 `~/.config/wechat-keys.json` 已有 key,先用 `--match-only --targets all --reuse-log` 尝试复用。
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
Medium
Python shutil operations
shutil.rmtree(out_base)
The --clean option recursively deletes the user-selected output path without a vault-boundary check. A mistaken path can destroy unrelated files.
Medium
Python shutil operations
shutil.copytree(WECHAT_APP, copy_path, symlinks=True)
The script copies the complete WeChat application before ad-hoc signing it. This is deliberate host modification with substantial filesystem impact.
Medium
Python file write/append · 2 occurrences
with open(report_path, "w", encoding="utf-8") as f:
This writes a readable report containing private conversation content to a configured directory. The operation is expected but creates a confidentiality risk.
Low
Python glob/pattern matching
dirs = sorted(glob.glob(str(WECHAT_BASE / "*/db_storage")))
The glob enumerates WeChat account database directories and derives a local account identifier. This is intentional local data discovery.
Risk Factors
📁 Filesystem access (50)
scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:229 scripts/decrypt_all_dbs.py:69 scripts/decrypt_all_dbs.py:73 scripts/decrypt_all_dbs.py:83 scripts/export_chat.py:26 scripts/export_chat.py:26 scripts/export_chat.py:72 scripts/export_chat.py:76 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:28 scripts/extract_keys.py:635 scripts/extract_keys.py:19 scripts/extract_keys.py:431 scripts/extract_keys.py:319 scripts/extract_keys.py:283 scripts/extract_keys.py:441 scripts/extract_keys.py:339 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:68 scripts/list_contacts.py:100 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:75 scripts/search_sns.py:83 scripts/vault_cli.py:29 scripts/vault_cli.py:29 scripts/vault_cli.py:94 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16 scripts/wechat_digest.py:61 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16
🔑 Env variables (19)
scripts/decrypt_all_dbs.py:93 scripts/decrypt_all_dbs.py:95 scripts/export_chat.py:83 scripts/export_chat.py:84 scripts/extract_keys.py:334 scripts/extract_keys.py:336 scripts/list_contacts.py:31 scripts/list_contacts.py:33 scripts/search_sns.py:43 scripts/search_sns.py:45 scripts/vault_cli.py:105 scripts/vault_cli.py:110 scripts/vault_cli.py:115 scripts/vault_cli.py:117 scripts/wechat_digest.py:54 scripts/wechat_digest.py:56 scripts/wechat_digest.py:67 scripts/wechat_digest.py:295 scripts/wechat_digest.py:296
⚙️ External commands (50)
scripts/extract_keys.py:218 scripts/extract_keys.py:256 scripts/extract_keys.py:436 scripts/wechat_digest.py:334 SKILL.md:9 SKILL.md:32 SKILL.md:33 SKILL.md:37 SKILL.md:39-52 SKILL.md:52-54 SKILL.md:54 SKILL.md:60-63 SKILL.md:63-65 SKILL.md:65-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:70-71 SKILL.md:71-73 SKILL.md:73-79 SKILL.md:79-81 SKILL.md:81-85 SKILL.md:85-87 SKILL.md:87-91 SKILL.md:91-93 SKILL.md:93-97 SKILL.md:97-99 SKILL.md:99-103 SKILL.md:103-105 SKILL.md:105-109 SKILL.md:109-111 SKILL.md:111-115 SKILL.md:115-117 SKILL.md:117-121 SKILL.md:121-123 SKILL.md:123-125 SKILL.md:125-133 SKILL.md:133-134 SKILL.md:134 SKILL.md:136-143 SKILL.md:143-144 SKILL.md:144-146 SKILL.md:146-152 SKILL.md:152-153 SKILL.md:153-159 SKILL.md:159 SKILL.md:164 SKILL.md:165-166 SKILL.md:166 SKILL.md:169-170
Detected Patterns
System reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissance
Audited by: codex
Jul 11, 2026, 04:11 AM
The skill intentionally instruments WeChat, captures reusable cryptographic material, decrypts private databases, and exports plaintext conversation data. No application exfiltration was found, but unsafe temporary storage, plaintext keys, generated-source injection, and broad host modifications create serious local risk.
9
Files scanned
3,885
Lines analyzed
113
Review items
0
False positives ignored
Confirmed security concerns (83)
Critical
Process Instrumentation Captures Cryptographic Secrets
Frida hooks WeChat key derivation, reads passwords and derived keys from process memory, and records them for database decryption.
The hook explicitly reads password and derived-key pointers, then attaches to or spawns WeChat. The credential extraction intent is direct.
High
Captured Secrets Persist in a Predictable Temporary Log
Captured passwords, salts, and derived keys are appended to /tmp/wechat_frida_keys.log. Reuse mode preserves the log without enforcing restrictive permissions.
The embedded hook appends full capture records to a fixed /tmp path. The command option confirms that the log can remain for later reuse.
High
Reusable Database Keys Are Stored Unencrypted
Matched SQLCipher keys are saved as plaintext JSON in the user configuration directory. File mode 0600 does not provide encryption at rest.
The matched key dictionary is passed directly to JSON serialization. The only protection applied is a filesystem permission change.
High
User-Controlled Path Is Inserted Into Executed Python Source
The --wechat-copy path is inserted into a generated Python string without escaping. A crafted existing path can alter the temporary host program before execution.
The path originates from an unrestricted command-line argument and replaces text inside a quoted Python assignment. The resulting source is executed by the interpreter.
Medium
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
if name.endswith(".db") and "/" in name:
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": "message/message_0.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_1": "message/message_1.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_2": "message/message_2.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_3": "message/message_3.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_fts": "message/message_fts.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_resource": "message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": "contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": "session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": "sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite": "favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
for path in sorted(db_base.rglob("*.db")):
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
wxid, db_base = find_db_base(args.db_base)
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns": os.path.join(db_base, "sns", "sns.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
return os.path.join(tmp_dir, "contact.db"), os.path.join(tmp_dir, "sns.db")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
return sorted((decrypted_dir / "message").glob("message_*.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact/contact.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session/session.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"sns/sns.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"favorite/favorite.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message/message_resource.db",
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
session_db = decrypted_dir / "session/session.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 session.db,请先增量或全量解密: {session_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit("session.db 中没有 SessionTable")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contact_db = decrypted_dir / "contact/contact.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
fav_db = decrypted_dir / "favorite/favorite.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 favorite.db: {fav_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit("favorite.db 中没有 fav_db_item")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
sns_db = decrypted_dir / "sns/sns.db"
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
raise SystemExit(f"找不到 sns.db: {sns_db}")
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(path, keys[name], os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"message_0": os.path.join(db_base, "message", "message_0.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"contact": os.path.join(db_base, "contact", "contact.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
"session": os.path.join(db_base, "session", "session.db"),
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
decrypt_db(paths[name], key_hex, os.path.join(tmp_dir, f"{name}.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
contacts = get_contact_map(os.path.join(tmp_dir, "contact.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
hash_map = get_hash_map(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
db = sqlite3.connect(os.path.join(tmp_dir, "message_0.db"))
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Medium
SQLite database file
优先使用已解密的 `sns/sns.db`、`favorite/favorite.db`、`message_resource.db`。缺 key 时只补相关库,不全量抓取。输出到用户配置的导出目录。
This references, decrypts, or queries WeChat databases containing messages, contacts, sessions, Moments, or Favorites. Authorized functionality still exposes highly private local data.
Low
System reconnaissance
wxid = config.get("wxid")
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
).expanduser() / wxid / "db_storage"
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
pid = device.spawn([WECHAT_PATH])
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
pid = ATTACH_PID
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
wxid = db_base.parts[-2] if db_base.name == "db_storage" else db_base.name
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
wxid = config.get("wxid") or db_base.parts[-2]
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
attach_pid = find_running_process(str(wechat_binary)) if mode == "attach" else 0
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Low
System reconnaissance
config["wxid"] = wxid
This line discovers or records a local WeChat account path, identifier, or process needed for instrumentation. The behavior is intentional but exposes host metadata.
Capability review items (27)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file in home directory · 2 occurrences
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
~/.config/wechat-keys.json
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access · 2 occurrences
KEYS_FILE = Path("~/.config/wechat-keys.json").expanduser()
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Process spawn
pid = device.spawn([WECHAT_PATH])
Frida spawns and attaches to a signed WeChat executable to intercept key derivation. This is invasive process instrumentation with direct access to secrets.
High
Python subprocess.run
result = subprocess.run(cmd, capture_output=True, text=True)
This wrapper runs pip, codesign, and pgrep commands. Arguments use list form, but the commands install software and modify a copied application.
High
Python subprocess.run
subprocess.run([sys.executable, host_path], check=True)
This executes a generated Python host script that attaches Frida to WeChat. The script includes raw string substitutions and handles captured cryptographic material.
High
Temp directory access
FRIDA_LOG = Path("/tmp/wechat_frida_keys.log")
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
Temp directory access
parser.add_argument("--reuse-log", action="store_true", help="Do not delete /tmp/wechat_frida_keys.l
The predictable /tmp log stores captured passwords, salts, and derived keys. Reuse mode intentionally preserves this sensitive material.
High
Hidden file in home directory · 3 occurrences
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access · 3 occurrences
KEYS_FILE = os.path.expanduser("~/.config/wechat-keys.json")
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Python file write/append · 3 occurrences
with open(out_path, "wb") as f:
This writes a decrypted SQLite database containing contacts or messages to a persistent local temp directory. The write does not set restrictive file permissions.
High
Hidden file in home directory
2. 如果 `~/.config/wechat-keys.json` 已有 key,先用 `--match-only --targets all --reuse-log` 尝试复用。
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
High
Hidden file access
2. 如果 `~/.config/wechat-keys.json` 已有 key,先用 `--match-only --targets all --reuse-log` 尝试复用。
This path contains reusable WeChat SQLCipher keys in plaintext JSON. Mode 0600 limits access but does not encrypt the secrets at rest.
Medium
Python shutil operations
shutil.rmtree(out_base)
The --clean option recursively deletes the user-selected output path without a vault-boundary check. A mistaken path can destroy unrelated files.
Medium
Python shutil operations
shutil.copytree(WECHAT_APP, copy_path, symlinks=True)
The script copies the complete WeChat application before ad-hoc signing it. This is deliberate host modification with substantial filesystem impact.
Medium
Python file write/append · 2 occurrences
with open(report_path, "w", encoding="utf-8") as f:
This writes a readable report containing private conversation content to a configured directory. The operation is expected but creates a confidentiality risk.
Low
Python glob/pattern matching
dirs = sorted(glob.glob(str(WECHAT_BASE / "*/db_storage")))
The glob enumerates WeChat account database directories and derives a local account identifier. This is intentional local data discovery.
Risk Factors
📁 Filesystem access (50)
scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:6 scripts/decrypt_all_dbs.py:7 scripts/decrypt_all_dbs.py:32 scripts/decrypt_all_dbs.py:33 scripts/decrypt_all_dbs.py:229 scripts/decrypt_all_dbs.py:69 scripts/decrypt_all_dbs.py:73 scripts/decrypt_all_dbs.py:83 scripts/export_chat.py:26 scripts/export_chat.py:26 scripts/export_chat.py:72 scripts/export_chat.py:76 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:24 scripts/extract_keys.py:25 scripts/extract_keys.py:28 scripts/extract_keys.py:635 scripts/extract_keys.py:19 scripts/extract_keys.py:431 scripts/extract_keys.py:319 scripts/extract_keys.py:283 scripts/extract_keys.py:441 scripts/extract_keys.py:339 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:14 scripts/list_contacts.py:15 scripts/list_contacts.py:95 scripts/list_contacts.py:68 scripts/list_contacts.py:100 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:25 scripts/search_sns.py:26 scripts/search_sns.py:75 scripts/search_sns.py:83 scripts/vault_cli.py:29 scripts/vault_cli.py:29 scripts/vault_cli.py:94 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16 scripts/wechat_digest.py:61 scripts/wechat_digest.py:15 scripts/wechat_digest.py:16
🔑 Env variables (19)
scripts/decrypt_all_dbs.py:93 scripts/decrypt_all_dbs.py:95 scripts/export_chat.py:83 scripts/export_chat.py:84 scripts/extract_keys.py:334 scripts/extract_keys.py:336 scripts/list_contacts.py:31 scripts/list_contacts.py:33 scripts/search_sns.py:43 scripts/search_sns.py:45 scripts/vault_cli.py:105 scripts/vault_cli.py:110 scripts/vault_cli.py:115 scripts/vault_cli.py:117 scripts/wechat_digest.py:54 scripts/wechat_digest.py:56 scripts/wechat_digest.py:67 scripts/wechat_digest.py:295 scripts/wechat_digest.py:296
⚙️ External commands (50)
scripts/extract_keys.py:218 scripts/extract_keys.py:256 scripts/extract_keys.py:436 scripts/wechat_digest.py:334 SKILL.md:9 SKILL.md:32 SKILL.md:33 SKILL.md:37 SKILL.md:39-52 SKILL.md:52-54 SKILL.md:54 SKILL.md:60-63 SKILL.md:63-65 SKILL.md:65-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:70-71 SKILL.md:71-73 SKILL.md:73-79 SKILL.md:79-81 SKILL.md:81-85 SKILL.md:85-87 SKILL.md:87-91 SKILL.md:91-93 SKILL.md:93-97 SKILL.md:97-99 SKILL.md:99-103 SKILL.md:103-105 SKILL.md:105-109 SKILL.md:109-111 SKILL.md:111-115 SKILL.md:115-117 SKILL.md:117-121 SKILL.md:121-123 SKILL.md:123-125 SKILL.md:125-133 SKILL.md:133-134 SKILL.md:134 SKILL.md:136-143 SKILL.md:143-144 SKILL.md:144-146 SKILL.md:146-152 SKILL.md:152-153 SKILL.md:153-159 SKILL.md:159 SKILL.md:164 SKILL.md:165-166 SKILL.md:166 SKILL.md:169-170
Detected Patterns
System reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissanceSystem reconnaissance
Audited by: codex