← 返回 Skills 市场
xhc1111

payforservice

作者 xhc1111 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
132
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install payforservice3
功能描述
支付宝支付服务处理技能。处理支付链接、提交支付请求、查询支付结果。触发条件:1)上下文中出现收银台链接(域名匹配 cashier*.alipay.com 或 *excashier*.alipay.com);2)其他技能/工具返回的消息中包含使用支付宝支付的指令;3)用户明确要求支付。注意:使用本技能时你需要先读取...
安全使用建议
This skill is internally consistent with its purpose (it installs and uses an alipay-bot CLI to handle Alipay cashier links). Before installing or enabling it: 1) verify the npm package and GitHub repo are genuine (confirm publisher and repository contents); 2) perform the recommended integrity check (npm view ... dist.integrity) and refuse to install if it doesn't match; 3) be aware the skill will install and execute third‑party code from npm (supply‑chain risk) and will output one‑time signed URLs—ensure your agent/framework won't log or forward those URLs to unintended places; 4) note that it can auto-invoke an authorization skill as part of the flow—if you want stricter control, require explicit user confirmation before any authorization or cross-skill calls.
功能分析
Type: OpenClaw Skill Name: payforservice3 Version: 1.0.0 The skill bundle 'payforservice3' is a specialized tool for handling Alipay payment processes. It provides a structured workflow for an AI agent to interact with a CLI tool ('alipay-bot') to submit payments and query transaction statuses. The skill demonstrates several security best practices, including mandatory integrity verification for its npm package (@alipay/[email protected]), strict shell argument escaping to prevent injection, and explicit instructions to avoid accessing sensitive hidden directories. The data collected (such as order summaries and environment metadata like 'AIPAY_OS') is logically aligned with its stated purpose of payment processing and UI adaptation. No indicators of malicious intent, such as data exfiltration or unauthorized persistence, were identified in SKILL.md or _meta.json.
能力标签
cryptorequires-walletcan-make-purchasesrequires-sensitive-credentials
能力评估
Purpose & Capability
Name/description (Alipay payment handling) aligns with required items: an alipay-bot CLI, npm for installation, and optional context environment variables for formatting. No unrelated credentials or unrelated binaries are requested.
Instruction Scope
SKILL.md instructs using the alipay-bot CLI to check wallet, submit payments, and poll results—all within the stated payment flow. It also instructs extracting inbound channel/session metadata to set non-sensitive env vars (AIPAY_OUTPUT_CHANNEL, AIPAY_SESSION_ID, etc.). It will auto-invoke an authorization skill when needed; that expands runtime actions beyond a single CLI call but is consistent with payment onboarding. The doc warns not to log one-time signed URLs and to avoid sending them to non-user channels.
Install Mechanism
Install uses a public npm package (@alipay/[email protected]) and provides a dist.integrity hash for verification. Installing an npm package is expected for providing a CLI, but it is a supply-chain risk compared with an instruction-only skill. The SKILL.md specifically requires integrity verification before installing, which is good practice.
Credentials
No required secret credentials are requested; the listed environment variables are optional context/formatting parameters rather than authentication tokens. The skill does recommend (but not require) passing framework/session/channel/model hints to the CLI for formatting; this is proportional to its purpose.
Persistence & Privilege
always:false and normal model invocation settings. The skill does not request persistent system-wide privileges or modify other skills' configurations. It may call another skill (alipay-authenticate-wallet) during normal operation, which is within its payment flow design.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install payforservice3
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /payforservice3 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
alipay-pay-for-service skill – initial release: - Provides Alipay payment service processing, including payment link handling, payment submission, and payment status query. - Automatically triggers under three conditions: (1) presence of cashier URLs in the context, (2) Alipay payment instructions from other skills/tools, (3) user explicitly requests payment. - Includes strict CLI usage and security guidelines, input validation, and explicit handling of edge cases (link expiration, multiple failures, invalid sessions). - Features automated authorization flow when wallet access is required, cooperating with the alipay-authenticate-wallet skill. - Supports environment variable-based context adaptation for multi-channel output and session isolation. - Designed to avoid common pitfalls such as improper image handling, truncated URLs, and incorrect step order.
元数据
Slug payforservice3
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

payforservice 是什么?

支付宝支付服务处理技能。处理支付链接、提交支付请求、查询支付结果。触发条件:1)上下文中出现收银台链接(域名匹配 cashier*.alipay.com 或 *excashier*.alipay.com);2)其他技能/工具返回的消息中包含使用支付宝支付的指令;3)用户明确要求支付。注意:使用本技能时你需要先读取... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 132 次。

如何安装 payforservice?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install payforservice3」即可一键安装,无需额外配置。

payforservice 是免费的吗?

是的,payforservice 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

payforservice 支持哪些平台?

payforservice 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 payforservice?

由 xhc1111(@xhc1111)开发并维护,当前版本 v1.0.0。

💬 留言讨论