微信支付基础支付接入skill

微信支付基础支付解决方案，涵盖支付、退款账单、分账、商户进件、开户意愿确认，提供选型/代码示例/业务速查/质量评估/排障五大能力。Use when user mentions "JSAPI支付", "APP支付", "H5支付", "Native支付", "小程序支付", "付款码支付", "合单支付", "调起...

This skill is internally coherent for WeChat Pay guidance: it bundles official-style docs, many language sample files, and helper scripts. Before installing or using it: - Review bundled sample code (especially scripts) for hard-coded secrets, test credentials, or insecure practices before copying into production. - Never paste or transmit your private API key or private certificate to the agent. Follow the skill's recommended flow: perform signing on your own server and only share the minimal signature output (Base64 signature, timestamp, nonce) if needed. - When the skill offers to 'run' diagnostic scripts, confirm whether it means you should run them locally — do not allow the agent to run commands on your environment or to upload your private keys. - If you plan to use any examples in production, rotate any test credentials, run static analysis on the code, and test in a sandbox merchant account first. If you want, I can (a) scan the bundled code files for obvious hard-coded credentials and risky patterns, or (b) point out exactly which files to inspect first (e.g., scripts/商户/*.py and any 'utility' files that might load keys).

Type: OpenClaw Skill Name: wechatpay-basic-payment Version: 1.0.1 The skill bundle is a comprehensive developer resource for WeChat Pay integration, containing standard Go/Java code examples and Python troubleshooting scripts. The instructions in SKILL.md are well-structured and include safety constraints, such as forbidding the agent from writing files or generating code from scratch. The troubleshooting scripts (e.g., scripts/商户/查询订单.py) are designed with security in mind, utilizing a 'signature mode' that requires users to provide pre-calculated signatures rather than sharing their private keys with the agent. No evidence of data exfiltration, malicious execution, or prompt injection was found.