← 返回 Skills 市场
cpef-psbc
作者
hypersonal
· GitHub ↗
· v1.0.0
· MIT-0
159
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install cpef-psbc
功能描述
中国邮政储蓄银行银企直联接口,支持余额查询、明细查询及支付审核操作。
使用说明 (SKILL.md)
cpef-psbc
Description: 中国邮政储蓄银行银企直联标准接口api,包含余额查询、明细查询、审核支付等
Parameters
- OpName: string (必选) 1001 / 1002 / C002
- Query_Account: string (必选) 账号
- Currency: string (可选) 币种类型
- Begin_Date: string (可选) YYYY-MM-DD
- Amount: object (可选) 转账金额
License
MIT-0
安全使用建议
This skill is incomplete and should be treated with caution. It purports to connect to a bank but provides no endpoint or secure credential handling and includes empty code files and a config file with placeholder secrets (and a syntax issue in the signSecret line). Before installing or trusting this skill, ask the maintainer for: (1) a complete implementation (non-empty api/sign code), (2) explicit declaration of required environment variables or secure secret storage, (3) a valid baseUrl and documentation of the API endpoints, and (4) removal of obvious syntax errors and placeholder values. Do not paste real merchant IDs, signing secrets, or bank credentials into this skill's config until the issues are resolved and you verify the source. If you need, provide the full code or a link to the repository and I can re-evaluate.
功能分析
Type: OpenClaw Skill
Name: cpef-psbc
Version: 1.0.0
The skill bundle is a configuration template for the Postal Savings Bank of China (PSBC) API, containing metadata, parameter definitions in SKILL.md, and endpoint mappings in config.js. It lacks executable logic or any indicators of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The skill's purpose is a bank API integration which legitimately requires a gateway URL, merchant ID, and signing secret/certificate. Those items appear only as empty placeholders in config.js (baseUrl, merch_id, signSecret) but the skill declares no required environment variables or configuration paths. That mismatch is unexpected and incoherent for a banking integration.
Instruction Scope
SKILL.md only describes API parameters (OpName, Query_Account, etc.) and does not explain how to supply credentials, how to configure the base URL, nor how to obtain or store signing material. Two code files (api.js, sign.js) are present but empty, leaving runtime behavior undefined. The agent might be expected to call external endpoints, but no endpoint or auth flow is provided.
Install Mechanism
No install spec is provided (instruction-only). This is low-risk from an installation perspective because nothing is downloaded or written by an installer.
Credentials
The skill requests no environment credentials in the metadata, yet config.js contains fields for sensitive values (merch_id, signSecret). Those fields are not declared or documented as required env vars — a red flag because sensitive bank credentials are involved but not handled or requested explicitly/securely.
Persistence & Privilege
The skill does not request always:true and uses default invocation settings. It does not appear to request elevated persistent privileges.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install cpef-psbc - 安装完成后,直接呼叫该 Skill 的名称或使用
/cpef-psbc触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of cpef-psbc:
- Provides standard API interfaces for China Post Savings Bank (PSBC) enterprise-bank direct connection.
- Supports balance inquiry, transaction details inquiry, and payment approval.
- Includes parameters for operation type, account number, currency, date, and transfer amount.
- Licensed under MIT-0.
元数据
常见问题
cpef-psbc 是什么?
中国邮政储蓄银行银企直联接口,支持余额查询、明细查询及支付审核操作。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 159 次。
如何安装 cpef-psbc?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install cpef-psbc」即可一键安装,无需额外配置。
cpef-psbc 是免费的吗?
是的,cpef-psbc 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
cpef-psbc 支持哪些平台?
cpef-psbc 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 cpef-psbc?
由 hypersonal(@hypersonal)开发并维护,当前版本 v1.0.0。
推荐 Skills