Security checks across malware telemetry and agentic risk
This skill openly aims to build personas from private chats, but it also includes intrusive automatic extraction of WeChat and iMessage data that needs careful review before use.
Install only if you are comfortable granting the agent access to local message databases and possible credential-like WeChat encryption keys. Use it only on accounts and conversations you are authorized to process, avoid disabling system protections, review generated files for retained private data, and prefer manual redacted chat exports over automatic extraction.
else:
print("KEY_NOT_FOUND")
"""
result = subprocess.run(
["python3", "-c", f"exec({repr(lldb_script)})"],
capture_output=True, text=True, timeout=30,
)def _extract_key_macos_keychain() -> str | None:
"""尝试从 macOS Keychain 获取微信密钥（部分旧版本可能存在）"""
try:
result = subprocess.run(
["security", "find-generic-password", "-s", "com.tencent.xinWeChat", "-w"],
capture_output=True, text=True, timeout=5,
)65/65 vendors flagged this skill as clean.