This tool is designed for a single purpose: letting a WeChat account owner access and back up their own local data, on their own machine, with their own consent.

• Accessing a database you are not the owner of (another person's account, a device you do not control) is illegal in most jurisdictions, regardless of who owns the hardware. Monitoring a partner, employee, or any third party without their informed consent is a crime, not a gray area.
• Deploying this tool onto someone else's machine, bundling it into other software, or operating it remotely and silently is strictly prohibited.
• Users are solely responsible for compliance with local laws. The authors provide the code for legitimate personal-data management and accept no liability for misuse.
• Open-source software can be modified by anyone. Forks or rebuilds that remove safeguards or repurpose this tool for surveillance, stalking, or black/gray-market use have nothing to do with this project; the original repository is the only official source.

If you suspect this tool was installed on a device without consent, stop using the device for sensitive activity and ask a qualified security professional to inspect it. Do not publish the configuration directory or its contents while reporting the concern.

• Local-first: WeFlow CLI reads local data directly and has no built-in tracking or telemetry. Explicit article, WeRead, Bot-channel and cloud-AI workflows can make network requests.
• Encrypted key storage: database keys are written to ~/.weflow-cli/config.json only after machine- and user-bound AES-256-GCM encryption; the ciphertext cannot be decrypted on another machine or under another account.
• Explicit AI opt-in: AI features (article summaries, classification, RAG Q&A) activate only after you explicitly configure your own API key, and only the content you select for processing is uploaded.
• Strict assistant defaults: the WeChat assistant denies all senders until assistantWhitelist is explicitly configured, and cloud inference defaults to strict privacy mode.
• Loopback-only web services: local readers and servers bind to 127.0.0.1 and are never exposed to the network.
• Narrow initialization scope: platform-specific initialization is only an optional local setup path; it must not be repurposed for remote access, surveillance, or collection of another account's data.

Do not open a public issue for a vulnerability involving database access, key extraction, message sending, credentials, path traversal, command execution or data disclosure.

Email the repository owner through the contact channel listed on the GitHub profile, with a concise description, affected version, reproduction steps and impact. Do not attach real databases, keys, access tokens, personal messages or unredacted screenshots. You should receive an acknowledgement within seven days.

Security fixes are applied to the current master branch and the latest npm release when practical. Older releases may require upgrading.

• Treat ~/.weflow-cli/config.json, .mcp.json, output/, exported chats and every *.db file as sensitive.
• Never share encryption keys, wxid values, API keys, WeChat credentials or full process output in an issue.
• Before running an MCP client, confirm its approval model and the directory configured as its working directory.
• The project can make network requests for explicitly selected article, AI, WeRead and official-account workflows. Review your provider and account permissions before enabling them.