wechat-local-vault

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

该 skill 与其声明目的基本一致，没有明显外传端点或可验证的恶意安装链，更像高敏感本地取证/归档工具而非确认恶意软件。但它会提取微信解密 key、解密并批量导出私人通信数据，权限和隐私影响很强，适合判为高敏感、可被滥用的可疑技能。

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 03:18 AM

Package URL

pkg:socket/skills-sh/mcncarl%2Fyichen-skills%2Fwechat-local-vault%2F@d7b7be69e801978eae0d0a0463960002b28ed19ea1f126245fd3c691dca58bf7