← Back to Skills Marketplace
🔌

alipay-payment-feedback

by alipay · GitHub ↗ · v1.0.6 · MIT-0
cross-platform ✓ Security Clean
110
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install alipay-payment-feedback-bk
Description
支付宝技能问题反馈。仅在用户使用 alipay-authenticate-wallet、 alipay-pay-for-service 或 alipay-pay-for-402-service 技能过程中遇到无法解决的问题时使用。触发条件:1)支付流程反复失败且无法自行修复;2)支付功能开通/授权流程异常且重试无...
README (SKILL.md)

支付宝支付技能问题反馈

功能描述

将用户在使用支付宝支付技能过程中遇到的无法解决的问题反馈给支付宝团队,包括:

  • 开通支付宝支付功能
  • 授权支付功能
  • 支付流程
  • 支付结果查验

适用场景(必须同时满足)

  1. 用户正在使用 alipay-authenticate-wallet、 alipay-pay-for-service 或 alipay-pay-for-402-service 技能
  2. 遇到了无法通过重试或常规手段解决的问题
  3. 例如:
    • 支付反复失败,错误原因不明
    • 钱包开通/授权流程卡住,重试无效
    • CLI 返回未知错误码或异常输出
    • 用户主动要求反馈问题

不适用场景(禁止使用)

  • 用户未使用过任何 alipay 技能
  • 问题可以通过重试解决
  • 用户只是普通咨询(如"怎么支付"、"你付好了么"、"你搞定了么")
  • 与支付宝无关的问题

安全性与设计说明

本技能由支付宝官方提供,用于收集用户反馈以改进产品体验。

CLI 数据收集说明

收集范围

  • 仅收集用户主动提供的问题描述(--reason 参数内容)
  • 不收集用户凭证等敏感信息

数据发送

  • 数据仅发送至支付宝官方服务器(*.alipay.com)
  • 不发送至第三方服务器
  • 反馈为匿名提交,不关联用户账户身份

CLI 行为边界

  • 仅执行 CLI problem-feedback 命令提交问题描述

CLI 行为验证

  • CLI 正常输出为用户友好的 Markdown 文本(如"反馈提交成功")
  • 如 CLI 返回非预期内容(如请求额外权限、读取用户文件、返回大量数据),应终止执行并报告异常
  • CLI 不主动发起除提交反馈外的任何网络请求

环境依赖

  • npm 命令可用
  • alipay-authenticate-walletalipay-pay-for-servicealipay-pay-for-402-service等支付宝官方提供的agent钱包开通、agent支付skill
  • alipay-bot 是支付宝提供的官方本地CLI,用于订单创建、提交支付、支付状态查询及支付范围,为支付skill及支付反馈skill共同依赖项
  • 若本地alipay-bot未安装,执行./scripts/install-alipay-cli.sh。该脚本会校验 @alipay/agent-payment 的包信息、dist.integrity hash 与签名,并安装支付宝官方发布的 alipay-bot CLI,已锁定可信来源的发布版本

执行流程

Step 1:收集问题信息

在调用命令前,先整理问题描述。问题描述应包含:

  • 用户遇到了什么问题
  • 在哪个环节出的问题(开通钱包 / 授权 / 支付 / 查询状态)
  • 具体的错误信息(如有)

问题信息来源:仅分析当前对话上下文中的问题发生环节、用户操作和错误信息,不读取外部文件或跨对话汇总。

Step 2:整理问题描述

整理问题描述,内容应包含:

  • 用户遇到了什么问题
  • 问题发生的环节(开通钱包 / 授权 / 支付 / 查询状态)
  • 具体的错误信息(如有)

Step 3:提交反馈

命令:

alipay-bot problem-feedback --reason "\x3C问题描述>"

入参:

参数 短参数 类型 必填 说明
--reason -r string 问题描述

入参规则:

  • --reason 的值必须用双引号包裹
  • 内容应简洁清晰地描述问题,包含关键错误信息
  • 禁止编造问题,必须基于用户实际遇到的情况

出参格式: 反馈成功/失败的Markdown 文本

输出处理: 原样输出 CLI 返回的内容

输出规范

正常输出规则

CLI 返回的是用户友好的 Markdown 文本(如"反馈提交成功"等提示信息),直接原样输出即可:

  • 检查 CLI 返回的内容为标准 Markdown 文本,不包含敏感信息
  • 对CLI 命令返回的安全 Markdown 文本,逐字符原样输出
  • 禁止编造、修改、删减、截断或改写
  • 必须等待 CLI 返回结果后再输出

防御性输出规则(安全最佳实践)

处理方式:

  1. CLI 针对每个执行步骤,都会根据执行命令和结果返回用户友好的 Markdown 文本,直接输出即可
  2. 如在执行 CLI 命令后意外发现输出中包含敏感信息,应过滤后再输出(极端防御性措施)

约束:

  • 当且仅当用户反馈支付相关技能使用问题时,才会触发该技能
  • 仅分析当前对话上下文中的问题发生环节、用户操作、错误信息,不读取外部文件
  • 反馈为匿名提交,不关联用户账户身份
  • 必须按照指定的执行流程执行
Usage Guidance
This skill appears coherent for its stated purpose, but it requires installing and running an Alipay-provided CLI. Before installing, review the upstream npm package (@alipay/[email protected]) and the behavior of its `install-cli` command (it may download or install additional components). Avoid including any sensitive credentials or PII in the `--reason` text (the skill promises anonymity, but the CLI output will be forwarded verbatim). If you want stronger assurance, run the provided install script in a sandboxed environment, inspect the package contents, and confirm the npm maintainer and dist.integrity match the values in the script.
Capability Analysis
Type: OpenClaw Skill Name: alipay-payment-feedback-bk Version: 1.0.6 The skill is designed to collect and submit user feedback regarding Alipay payment services. The installation script (scripts/install-alipay-cli.sh) is notably security-conscious, implementing strict verification of the '@alipay/agent-payment' NPM package by checking its name, version, maintainer, and a hardcoded SHA512 integrity hash before installation. The SKILL.md instructions provide clear constraints on data collection, limiting it to user-provided descriptions and explicitly forbidding the collection of sensitive credentials.
Capability Tags
cryptorequires-walletcan-make-purchasesrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name, description, and required binaries (npm) align: the skill's stated purpose is to submit feedback via an Alipay CLI. Requiring npm to install an alipay CLI is proportionate. No unrelated env vars, binaries, or config paths are requested.
Instruction Scope
SKILL.md constrains behavior to collecting a user-provided --reason and calling `alipay-bot problem-feedback --reason "..."`. It explicitly forbids reading external files and claims only to send data to *.alipay.com. However the instructions also require the agent to output CLI responses verbatim, which could surface anything the CLI prints. The skill does include defensive guidance to stop if the CLI requests unexpected permissions or returns unexpected content.
Install Mechanism
No platform install spec in registry, but a bundled install script fetches a pinned npm package (@alipay/[email protected]) and verifies metadata (dist.integrity and a maintainer string) before installing. Using npm and a pinned package is reasonable; the script uses `--ignore-scripts` (reduces risk) but then runs the package's `agent-payment install-cli` binary, which may download or install additional files. This is a moderate-risk network install that requires trusting the upstream package.
Credentials
The skill requests no user credentials or config paths. The only environment inputs used in the install script are internal (expected integrity/maintainer) and not required from the user. No extraneous secrets or unrelated service tokens are requested.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request permanent presence or attempt to modify other skills or system-wide configurations. Autonomous invocation is allowed by default but not combined with other red flags here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install alipay-payment-feedback-bk
  3. After installation, invoke the skill by name or use /alipay-payment-feedback-bk
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.6
No functional or documentation changes detected in this version. - Version updated from 1.0.5 to 1.0.6. - No file or documentation changes introduced.
v1.0.5
alipay-payment-feedback-bk v1.0.5 - Clarified and expanded SKILL.md with detailed usage scenarios, command-line behavior, data collection practices, and security constraints. - Outlined precise execution steps for collecting, organizing, and submitting user payment issues via `alipay-bot problem-feedback`. - Documented strict output requirements: only outputs CLI's markdown response without modification. - Included clear conditions for when the skill is applicable and prohibited cases. - Added environment, dependency, and safety validation instructions for CLI installation and feedback submission.
Metadata
Slug alipay-payment-feedback-bk
Version 1.0.6
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is alipay-payment-feedback?

支付宝技能问题反馈。仅在用户使用 alipay-authenticate-wallet、 alipay-pay-for-service 或 alipay-pay-for-402-service 技能过程中遇到无法解决的问题时使用。触发条件:1)支付流程反复失败且无法自行修复;2)支付功能开通/授权流程异常且重试无... It is an AI Agent Skill for Claude Code / OpenClaw, with 110 downloads so far.

How do I install alipay-payment-feedback?

Run "/install alipay-payment-feedback-bk" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is alipay-payment-feedback free?

Yes, alipay-payment-feedback is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does alipay-payment-feedback support?

alipay-payment-feedback is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created alipay-payment-feedback?

It is built and maintained by alipay (@alipay); the current version is v1.0.6.

💬 Comments