← 返回 Skills 市场

jd-payment-process-skill

Name: jd-payment-process-skill
Author: xingyeyouran

作者 ClawTip.team · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

540

总下载

当前安装

版本数

在 OpenClaw 中安装

/install jd-payment-process-skill

功能描述

Executes a JD payment transaction for third-party skills. Trigger this tool strictly when a third-party service initiates a valid JD payment request. Note: R...

使用说明 (SKILL.md)

\r \r

Process the Payment Request\r

1. Required Parameters\r

\r Provide the following parameters strictly according to their defined formats:\r \r

merchant_wallet_address (string): The merchant's wallet token. \r
- Format: Must begin with mer- (e.g., mer-x1y2z3).\r
amount (integer): The transaction amount. \r
- Constraint: Must be an integer between 1 and 1000.\r
payer_authorization_sign (string): The payer's authorization signature. \r
- Format: Must begin with sign- (e.g., sign-a1b2c3).\r \r

2. Execution Command\r

\r Execute the script using the following bash command. Replace the placeholders \x3C...> with the validated parameter values. Do not use quotes around the parameters unless they contain spaces.\r \r

python3 skills/jd-payment-skill/scripts/payment_process.py \x3Cmerchant_wallet_address> \x3Camount> \x3Cpayer_authorization_sign>

安全使用建议

This skill appears to be a stub or incomplete: it advertises payment-processing capabilities and requests network/credential permissions, but the code only prints inputs and returns a fixed test token. Do not use this for real payments. Before installing or invoking: (1) verify the skill's origin and author; (2) request a clear explanation of where real payment settlement occurs and what credentials/API endpoints are required; (3) review or request a version that integrates with a real payment provider and properly validates inputs; and (4) test only in an isolated sandbox with no real funds until you confirm real payment behavior. If you don't get satisfactory answers, treat this as unsafe for production financial use.

功能分析

Type: OpenClaw Skill Name: jd-payment-process-skill Version: 1.0.0 The skill appears to be a mock or template for a payment processing utility. The Python script (payment_process.py) is a stub that prints input parameters and returns a hardcoded test token ('AABBCCDD') without performing any actual financial transactions, network calls, or credential access. While the SKILL.md requests outbound network and credential permissions, the provided code does not utilize them and contains no malicious logic.

能力评估

⚠ Purpose & Capability

Name/description claim this executes JD payment transactions for third-party skills. However, the shipped Python code only prints the input and returns a constant test token; it performs no real payment, no network calls, and requires no credentials. That is a substantive mismatch between claimed capability and actual behavior.

⚠ Instruction Scope

SKILL.md instructs the agent to run the provided script with validated parameters and advertises strict parameter formats and constraints, but the script itself only converts the amount to int and does not validate wallet/payer formats or enforce the stated constraints. SKILL.md also lists permissions (network.outbound, credential.read) that are not used by the script, which could mislead users or agents about expected actions.

✓ Install Mechanism

No install spec (instruction-only plus a small included script). Nothing is downloaded or written to disk beyond the provided files, so install mechanism risk is low.

⚠ Credentials

The skill declares permissions for network and credential reading in SKILL.md, but requires no environment variables or keys and the code does not access env vars or credentials. Either permissions are unnecessary (over-declared) or the implementation is incomplete; both are problematic for a payment processor.

✓ Persistence & Privilege

always is false and the skill does not request persistent agent-wide configuration or modify other skills. Autonomous invocation is allowed (platform default) but not accompanied by other high privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install jd-payment-process-skill
安装完成后，直接呼叫该 Skill 的名称或使用 /jd-payment-process-skill 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of jd-payment-process-skill. - Enables execution of JD payment transactions for third-party skills. - Requires merchant wallet address, transaction amount, and payer authorization signature as inputs. - Strict input format and validation guidelines provided. - Resource decryption not supported in this version.

元数据

Slug jd-payment-process-skill

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题