← 返回 Skills 市场

huifu-order-query

Name: huifu-order-query
Author: yangyubin1

作者 yangyubin1 · GitHub ↗ · v1.0.6 · MIT-0

cross-platform ⚠ suspicious

459

总下载

当前安装

版本数

在 OpenClaw 中安装

/install huifu-order-query

功能描述

[后端项目使用]汇付托管交易订单查询接口技能。用于查询订单支付状态和详细信息。当用户提到订单查询、支付查询、/hfpay/queryorderinfo时触发。

使用说明 (SKILL.md)

\r \r

汇付订单查询接口\r

引导词\r

\r 当开发者提到以下关键词时，本技能将被触发：\r \r

订单查询、支付查询、查询订单\r
/hfpay/queryorderinfo\r
汇付订单状态、支付状态查询\r
托管支付查询\r \r

前置检查（重要）\r

\r 在开始编写代码之前，必须先检查项目是否已安装汇付SDK依赖。\r \r

步骤1：检查依赖\r

\r 检查项目的 pom.xml 文件中是否包含 dg-java-sdk 依赖：\r \r

\x3Cdependency>\r
    \x3CgroupId>com.huifu.bspay.sdk\x3C/groupId>\r
    \x3CartifactId>dg-java-sdk\x3C/artifactId>\r
    \x3Cversion>${dg-java-sdk.version}\x3C/version>\r
\x3C/dependency>\r
```\r
\r
### 步骤2：安装依赖（如未安装）\r
\r
如果项目中没有该依赖，需要先在 pom.xml 中添加上述依赖，然后执行 Maven 安装：\r
\r
```bash\r
mvn clean install\r
```\r
\r
或在 IDE 中刷新 Maven 项目。\r
\r
### 步骤3：验证依赖\r
\r
确认以下类可以正常导入：\r
- `com.huifu.bspay.sdk.opps.core.BasePay`\r
- `com.huifu.bspay.sdk.opps.core.config.MerConfig`\r
- `com.huifu.bspay.sdk.opps.core.net.BasePayRequest`\r
- `com.huifu.bspay.sdk.opps.core.utils.DateTools`\r
- `com.huifu.bspay.sdk.opps.core.utils.SequenceTools`\r
\r
**只有完成以上前置检查后，才能继续按照 reference 目录中的示例代码进行开发。**\r
\r
## 接口说明\r
\r
| 属性 | 值 |\r
|-----|-----|\r
| 接口路径 | `/hfpay/queryorderinfo` |\r
| 请求方式 | POST |\r
| Content-Type | application/json |\r
| 汇付API端点 | `v2/trade/hosting/payment/queryorderinfo` |\r
\r
## 功能说明\r
\r
查询订单支付状态和详细信息，包括交易状态、金额、时间等。\r
\r
## 请求参数\r
\r
| 参数名 | 类型 | 必填 | 说明 |\r
|-------|------|-----|------|\r
| huifuId | String | 是 | 商户号 |\r
| org_req_date | String | 是 | 原交易请求日期（格式：yyyyMMdd） |\r
| org_req_seq_id | String | 是 | 原交易请求流水号 |\r
\r
## 实现步骤\r
\r
1. 初始化商户配置（MerConfig）\r
2. 组装请求参数（包含原交易信息）\r
3. 调用汇付API\r
4. 返回结果\r
\r
\r
## 注意事项\r
\r
1. 需要传入原交易的请求日期和请求流水号\r
2. 可用于确认支付状态后再进行业务处理\r
3. 建议在异步通知处理时同步调用查询接口进行二次确认\r

安全使用建议

This skill appears to be a straightforward instruction for adding a Huifu order-query implementation, but it omits two practical (and security-relevant) items: 1) it tells you to run Maven (mvn) yet the skill metadata lists no required binaries — confirm your environment has Maven installed before relying on these instructions; 2) it never specifies how to provide merchant credentials or keys (MerConfig), though the SDK will need them — verify where your project stores those secrets (environment variables, config files, keystore) and ensure they are handled securely. Additional checks before installing/using: confirm the dg-java-sdk version and its source, validate the Huifu API endpoints you will call, review any MerConfig initialization code to ensure secrets are not logged or uploaded elsewhere, and prefer testing in a dev environment. If the publisher supplies a homepage, repository, or explicit env vars for merchant credentials, and the skill metadata is updated to declare mvn as a required binary and the credential names, this assessment could move to benign.

功能分析

Type: OpenClaw Skill Name: huifu-order-query Version: 1.0.6 The skill bundle provides standard instructions and documentation for integrating the Huifu payment order query API into a Java backend project. It guides the agent through checking for the 'dg-java-sdk' dependency, running 'mvn clean install', and implementing the '/hfpay/queryorderinfo' endpoint. No malicious intent, data exfiltration, or suspicious commands were found in SKILL.md or _meta.json.

能力评估

ℹ Purpose & Capability

The name/description and the instructions consistently describe a Huifu (汇付) order query helper using the dg-java-sdk. Requesting the sdk dependency and showing API path/parameters is coherent with the stated purpose. However, the skill does not declare the practical runtime needs (merchant credentials / config) that the SDK and MerConfig will require.

ℹ Instruction Scope

The SKILL.md stays focused on implementing the query endpoint and only asks the developer to check pom.xml, add the dg-java-sdk dependency, run Maven, import SDK classes, and call the Huifu API. It does not instruct reading unrelated system files or exfiltrating data. It does, however, leave out any guidance about handling the merchant credentials/keys that MerConfig will need, which is an important omission.

✓ Install Mechanism

This is an instruction-only skill with no install spec or supplied code files, so nothing will be downloaded or written by the skill itself. That is the lowest install risk.

⚠ Credentials

requires.env is empty, yet the instructions refer to MerConfig and merchant parameters (huifuId) — in practice the SDK needs merchant credentials, keys, and endpoint configuration. The skill does not declare any environment variables or configuration paths for secrets (merchant ID, API keys, private keys, certs), which is disproportionate or incomplete.

✓ Persistence & Privilege

always is false and there is no install behavior or claims of modifying other skills or system-wide settings. The skill does not request persistent privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install huifu-order-query
安装完成后，直接呼叫该 Skill 的名称或使用 /huifu-order-query 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.6

- Removed the section referencing example code files from documentation - Improved overall documentation formatting and clarity - No functional or interface changes made in this version

v1.0.5

对接汇付托管支付查询接口- 初始版本

v1.0.4

huifu-order-query 1.0.4 对接汇付的托管支付查询能力

v1.0.2

huifu-order-query v1.0.2 支持接入汇付预支付订单查询

v1.0.1

huifu-order-query V.1.0.1 代码优化

v1.0.0

huifu-order-query v1.0.0 对接汇付托管支付订单查询接口

元数据

Slug huifu-order-query

版本 1.0.6

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 6

常见问题