Skills/ClawHub/wechat-chat-export-mac

wechat-chat-export-mac@1.0.0

VERIFIED

Publisher claims: "当用户要把微信里某个联系人、某段时间的文件图片视频批量下载到本地时用。指定联系人+日期范围，自动定位会话、批量点开原图、V2三段解密转码、按项目归档并验收缺口为0；实战单次导出1216文件163.9MB。适用微信桌面版4.x，仅macOS。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher lingyu9495-source · joined 8 days agoInstalls 235Last detonated 2 h ago
$clawhub install wechat-chat-export-mac
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedscripts/wx_decrypt.py:44 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/wx_download.py:26 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05