What problem does it solve?
WeCom (企业微信) stores chat history, contacts, and sessions in encrypted local databases on macOS, making it impossible to search, back up, or analyze your own enterprise chat data outside the app. This Skill decrypts those databases into private plaintext snapshots you can query and export.
Core Features & Use Cases
- Read-only database discovery and decryption: Detect WeCom 5.x datasets, capture the 16-byte wxSQLite3 AES-128 key via Frida attach, signed-copy spawn, or read-only Mach VM memory scan, and create timestamped plaintext snapshots with WAL merging.
- Query and export: List sessions and contacts, search message history by keyword, chat, or date range, and export conversations to Markdown or JSON files with 0600 permissions.
- Strict safety boundaries: Never controls the WeCom app, never sends messages, never overwrites files, never prints raw keys, and requires explicit per-session user authorization before any key capture.
- Use Case: You need to archive a project group chat before leaving a company. Run status to verify the dataset, capture the key with explicit authorization, decrypt a snapshot, then export the conversation to a private Markdown file.
Quick Start
Ask the assistant to check the status of your local WeCom databases and, after your explicit confirmation, decrypt a snapshot and export a chosen conversation to Markdown.
