← Back to Skills Marketplace
piaoleaf

SKILL接入微信支付,收款码生成

by piaoleaf · GitHub ↗ · v1.0.7 · MIT-0
cross-platform ✓ Security Clean
98
Downloads
0
Stars
0
Active Installs
8
Versions
Install in OpenClaw
/install weixinpay-skill
Description
微信支付SKILL接入,实现生成微信支付二维码,完成扫码支付
Usage Guidance
This skill appears to be a straightforward WeChat Pay integration guide, but its safe operation depends on how administrators supply and protect the required payment credentials. Before installing or enabling it: (1) confirm where the platform expects merchant API keys/certs to be stored (use a secrets manager or HSM, not chat or plain files); (2) verify the skill will never request you paste secrets into a chat or upload them in plain text; (3) require that callbacks use HTTPS and that the deployment enforces least privilege for any admin accounts; (4) test in a staging environment with test merchant credentials first; (5) ensure logging is configured to never persist sensitive values and that credential rotation procedures are in place; and (6) ask the skill author/platform to document exactly how secrets are injected at runtime (secret store name, RBAC, and audit logging) if that information is not already available.
Capability Tags
cryptocan-make-purchases
Capability Assessment
Purpose & Capability
The name/description (WeChat Pay, QR code generation, payment flows) aligns with the instructions in SKILL.md (merchant onboarding, unified order, QR generation, refunds, reconciliation). Required binaries/env/configs are absent from metadata because the skill expects administrator-provisioned credentials; this is coherent for a payment integration.
Instruction Scope
SKILL.md stays within the claimed scope: it provides step-by-step integration guidance for JSAPI/Native/H5 flows, callback handling, refund and billing operations and explicitly instructs that sensitive credentials must be handled by administrators. It does not instruct the agent to read unrelated files or pull arbitrary system data. The guidance is detailed rather than vague.
Install Mechanism
This is an instruction-only skill with no install spec or code files, so there is no installer or third-party download to evaluate. That minimizes disk-write/execution risk.
Credentials
The skill declares no required environment variables in registry metadata but repeatedly states it requires administrator-deployed WeChat Pay sensitive credentials (merchant API key, signing key, platform cert, private key). This is plausible and typical for payment integrations, but the metadata does not declare where/how those credentials must be provided to the runtime (platform secret store, service config, etc.), so the deployment model and secret-access mechanics should be clarified before trusting the skill.
Persistence & Privilege
The skill is not set to always:true and does not request to modify other skills or system-wide settings in the instructions. There is no evidence it requests elevated or persistent privileges beyond normal runtime access to administrator-configured credentials.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install weixinpay-skill
  3. After installation, invoke the skill by name or use /weixinpay-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.7
- 明确强化了敏感凭证的管理与安全要求,新增专门的“资历补充说明(敏感凭证安全管控专项)”章节,强调凭证仅由管理员部署、严格管控,普通用户无需接触。 - 阐述了管理员的安全责任、凭证存储与运行时保护规范,补充了安全机制、凭证轮换、权限分级与日志合规要求。 - 明确技能不会要求普通用户提供敏感凭证或环境变量,强调敏感凭证全程不暴露、不记录、不持久存储。 - 增强了安全校验流程,部署与运行环节均进行凭证合法性和有效性检查,分权管控管理员与普通用户。 - 细化了补充说明,对技能安全边界、反馈机制和合规要求进行重申。
v1.0.6
**Expanded documentation and clarified prerequisites for weixinpay-skill v1.0.6:** - Added detailed, step-by-step operating instructions for merchant onboarding, API integration, and daily operations. - Clearly outlined sensitive credential requirements and stated that only system administrators manage API keys and certificates. - Removed non-official merchant entry links; now only references the official WeChat Pay platform. - Addressed audit feedback by correcting mismatches between declared capabilities and real implementation needs. - Added a section explicitly listing administrator responsibilities and the boundaries of user participation. - Documented changes for improved transparency regarding setup and credential security.
v1.0.5
- 优化了敏感信息处理流程,证书和私钥等敏感内容由系统管理员部署,无需用户操作。 - 其他操作和功能保持不变,用户只需提供订单号和商户号即可生成付款码完成支付。
v1.0.4
- 内部描述新增:说明本技能经过微信支付的二次开发。 - 其余功能和使用方式未变。
v1.0.3
- 简化了支付接口集成部分的开发流程描述,去除了技术细节描述,使流程更简明易懂。 - 日常运营模块移除了关于交易投诉的内容。 - 精简了部分介绍和实例说明,保持核心信息不变。 - 资源链接表被移除,页面内容更为专注、简洁。
v1.0.2
- 更新说明,强调仅需订单号和商户号即可生成付款码,无需证书或私钥等敏感信息。 - 明确敏感信息无需提供,提升集成和使用的便捷性与安全性。 - 其余功能介绍和结构保持不变。
v1.0.1
- Expanded the skill description to specify 支付二维码 generation and scan payment completion. - Removed references to loading external documentation files and made all information self-contained. - Condensed and simplified API integration and merchant application instructions. - Stripped out detailed API endpoint listings and authentication technicalities for brevity. - Retained all key operational scenarios and resource links.
v1.0.0
Initial release of the WeChat Pay skill with end-to-end support: - Guides users through merchant onboarding for WeChat Pay, including requirements and application steps. - Provides step-by-step integration instructions for payment APIs (JSAPI, H5, Native, APP, Mini Program). - Covers daily operations: bill reconciliation, refunds, QR code generation, marketing tools, and managing disputes. - Links to official resources: merchant platform, development documentation, sample code, community forums, and sandbox. - Reference files loaded per user scenario for targeted guidance.
Metadata
Slug weixinpay-skill
Version 1.0.7
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 8
Frequently Asked Questions

What is SKILL接入微信支付,收款码生成?

微信支付SKILL接入,实现生成微信支付二维码,完成扫码支付. It is an AI Agent Skill for Claude Code / OpenClaw, with 98 downloads so far.

How do I install SKILL接入微信支付,收款码生成?

Run "/install weixinpay-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is SKILL接入微信支付,收款码生成 free?

Yes, SKILL接入微信支付,收款码生成 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does SKILL接入微信支付,收款码生成 support?

SKILL接入微信支付,收款码生成 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created SKILL接入微信支付,收款码生成?

It is built and maintained by piaoleaf (@piaoleaf); the current version is v1.0.7.

💬 Comments