← Back to Skills Marketplace
xhc1111

payforservice

by xhc1111 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
132
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install payforservice3
Description
支付宝支付服务处理技能。处理支付链接、提交支付请求、查询支付结果。触发条件:1)上下文中出现收银台链接(域名匹配 cashier*.alipay.com 或 *excashier*.alipay.com);2)其他技能/工具返回的消息中包含使用支付宝支付的指令;3)用户明确要求支付。注意:使用本技能时你需要先读取...
Usage Guidance
This skill is internally consistent with its purpose (it installs and uses an alipay-bot CLI to handle Alipay cashier links). Before installing or enabling it: 1) verify the npm package and GitHub repo are genuine (confirm publisher and repository contents); 2) perform the recommended integrity check (npm view ... dist.integrity) and refuse to install if it doesn't match; 3) be aware the skill will install and execute third‑party code from npm (supply‑chain risk) and will output one‑time signed URLs—ensure your agent/framework won't log or forward those URLs to unintended places; 4) note that it can auto-invoke an authorization skill as part of the flow—if you want stricter control, require explicit user confirmation before any authorization or cross-skill calls.
Capability Analysis
Type: OpenClaw Skill Name: payforservice3 Version: 1.0.0 The skill bundle 'payforservice3' is a specialized tool for handling Alipay payment processes. It provides a structured workflow for an AI agent to interact with a CLI tool ('alipay-bot') to submit payments and query transaction statuses. The skill demonstrates several security best practices, including mandatory integrity verification for its npm package (@alipay/[email protected]), strict shell argument escaping to prevent injection, and explicit instructions to avoid accessing sensitive hidden directories. The data collected (such as order summaries and environment metadata like 'AIPAY_OS') is logically aligned with its stated purpose of payment processing and UI adaptation. No indicators of malicious intent, such as data exfiltration or unauthorized persistence, were identified in SKILL.md or _meta.json.
Capability Tags
cryptorequires-walletcan-make-purchasesrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description (Alipay payment handling) aligns with required items: an alipay-bot CLI, npm for installation, and optional context environment variables for formatting. No unrelated credentials or unrelated binaries are requested.
Instruction Scope
SKILL.md instructs using the alipay-bot CLI to check wallet, submit payments, and poll results—all within the stated payment flow. It also instructs extracting inbound channel/session metadata to set non-sensitive env vars (AIPAY_OUTPUT_CHANNEL, AIPAY_SESSION_ID, etc.). It will auto-invoke an authorization skill when needed; that expands runtime actions beyond a single CLI call but is consistent with payment onboarding. The doc warns not to log one-time signed URLs and to avoid sending them to non-user channels.
Install Mechanism
Install uses a public npm package (@alipay/[email protected]) and provides a dist.integrity hash for verification. Installing an npm package is expected for providing a CLI, but it is a supply-chain risk compared with an instruction-only skill. The SKILL.md specifically requires integrity verification before installing, which is good practice.
Credentials
No required secret credentials are requested; the listed environment variables are optional context/formatting parameters rather than authentication tokens. The skill does recommend (but not require) passing framework/session/channel/model hints to the CLI for formatting; this is proportional to its purpose.
Persistence & Privilege
always:false and normal model invocation settings. The skill does not request persistent system-wide privileges or modify other skills' configurations. It may call another skill (alipay-authenticate-wallet) during normal operation, which is within its payment flow design.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install payforservice3
  3. After installation, invoke the skill by name or use /payforservice3
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
alipay-pay-for-service skill – initial release: - Provides Alipay payment service processing, including payment link handling, payment submission, and payment status query. - Automatically triggers under three conditions: (1) presence of cashier URLs in the context, (2) Alipay payment instructions from other skills/tools, (3) user explicitly requests payment. - Includes strict CLI usage and security guidelines, input validation, and explicit handling of edge cases (link expiration, multiple failures, invalid sessions). - Features automated authorization flow when wallet access is required, cooperating with the alipay-authenticate-wallet skill. - Supports environment variable-based context adaptation for multi-channel output and session isolation. - Designed to avoid common pitfalls such as improper image handling, truncated URLs, and incorrect step order.
Metadata
Slug payforservice3
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is payforservice?

支付宝支付服务处理技能。处理支付链接、提交支付请求、查询支付结果。触发条件:1)上下文中出现收银台链接(域名匹配 cashier*.alipay.com 或 *excashier*.alipay.com);2)其他技能/工具返回的消息中包含使用支付宝支付的指令;3)用户明确要求支付。注意:使用本技能时你需要先读取... It is an AI Agent Skill for Claude Code / OpenClaw, with 132 downloads so far.

How do I install payforservice?

Run "/install payforservice3" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is payforservice free?

Yes, payforservice is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does payforservice support?

payforservice is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created payforservice?

It is built and maintained by xhc1111 (@xhc1111); the current version is v1.0.0.

💬 Comments