微信支付商品券接入skill

微信支付商品券接入助手，提供券类型选型、API代码示例（Java/Go）、开发参数校验、接口报错排查和上线质量检查。Use when user mentions "商品券", "优惠券接入", "发券", "核销", "创建商品券", "商品券代码", "签名报错", "验签失败", "回调收不到", "Requ...

This skill appears to do exactly what it claims: provide docs and Java/Go example code for WeChat product-coupon integration. Before installing or using it, consider the following: (1) Do not paste private keys, apiclient_key.pem contents, APIv3 keys, or actual certificate serial numbers into chat—example files intentionally show placeholder paths. (2) If you allow the skill to perform the optional 'project code scan', grant it file access only after confirming which directories/files it may read and never share secret key files; prefer uploading a sanitized copy or running scans locally. (3) Treat the bundled code as examples—verify against official WeChat Pay docs and your security policies before copying into production. (4) If you need the skill to modify your repository or write files, avoid doing so: SKILL.md explicitly forbids writing into user projects. (5) If you want extra assurance, review the bundled SDK utility files (signing/verify code) locally to confirm they match official implementations and that no hard-coded secrets or external endpoints appear.

Type: OpenClaw Skill Name: wechatpay-product-coupon Version: 1.0.2 The skill bundle is a comprehensive integration assistant for WeChat Pay product coupons. It contains standard API implementation examples in Java and Go, along with diagnostic Python scripts (e.g., 'scripts/查询用户商品券详情_品牌.py') for troubleshooting user coupon states. The instructions in 'SKILL.md' are highly restrictive and follow security best practices by enforcing a multi-step confirmation protocol and explicitly forbidding the agent from writing to files or generating code outside of provided references. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; all network activity is directed at official WeChat Pay endpoints (api.mch.weixin.qq.com).