← 返回 Skills 市场
98
总下载
0
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install weixinpay-skill
功能描述
微信支付SKILL接入，实现生成微信支付二维码，完成扫码支付
安全使用建议
This skill appears to be a straightforward WeChat Pay integration guide, but its safe operation depends on how administrators supply and protect the required payment credentials. Before installing or enabling it: (1) confirm where the platform expects merchant API keys/certs to be stored (use a secrets manager or HSM, not chat or plain files); (2) verify the skill will never request you paste secrets into a chat or upload them in plain text; (3) require that callbacks use HTTPS and that the deployment enforces least privilege for any admin accounts; (4) test in a staging environment with test merchant credentials first; (5) ensure logging is configured to never persist sensitive values and that credential rotation procedures are in place; and (6) ask the skill author/platform to document exactly how secrets are injected at runtime (secret store name, RBAC, and audit logging) if that information is not already available.
能力标签
能力评估
Purpose & Capability
The name/description (WeChat Pay, QR code generation, payment flows) aligns with the instructions in SKILL.md (merchant onboarding, unified order, QR generation, refunds, reconciliation). Required binaries/env/configs are absent from metadata because the skill expects administrator-provisioned credentials; this is coherent for a payment integration.
Instruction Scope
SKILL.md stays within the claimed scope: it provides step-by-step integration guidance for JSAPI/Native/H5 flows, callback handling, refund and billing operations and explicitly instructs that sensitive credentials must be handled by administrators. It does not instruct the agent to read unrelated files or pull arbitrary system data. The guidance is detailed rather than vague.
Install Mechanism
This is an instruction-only skill with no install spec or code files, so there is no installer or third-party download to evaluate. That minimizes disk-write/execution risk.
Credentials
The skill declares no required environment variables in registry metadata but repeatedly states it requires administrator-deployed WeChat Pay sensitive credentials (merchant API key, signing key, platform cert, private key). This is plausible and typical for payment integrations, but the metadata does not declare where/how those credentials must be provided to the runtime (platform secret store, service config, etc.), so the deployment model and secret-access mechanics should be clarified before trusting the skill.
Persistence & Privilege
The skill is not set to always:true and does not request to modify other skills or system-wide settings in the instructions. There is no evidence it requests elevated or persistent privileges beyond normal runtime access to administrator-configured credentials.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install weixinpay-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/weixinpay-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.7
- 明确强化了敏感凭证的管理与安全要求，新增专门的“资历补充说明（敏感凭证安全管控专项）”章节，强调凭证仅由管理员部署、严格管控，普通用户无需接触。
- 阐述了管理员的安全责任、凭证存储与运行时保护规范，补充了安全机制、凭证轮换、权限分级与日志合规要求。
- 明确技能不会要求普通用户提供敏感凭证或环境变量，强调敏感凭证全程不暴露、不记录、不持久存储。
- 增强了安全校验流程，部署与运行环节均进行凭证合法性和有效性检查，分权管控管理员与普通用户。
- 细化了补充说明，对技能安全边界、反馈机制和合规要求进行重申。
v1.0.6
**Expanded documentation and clarified prerequisites for weixinpay-skill v1.0.6:**
- Added detailed, step-by-step operating instructions for merchant onboarding, API integration, and daily operations.
- Clearly outlined sensitive credential requirements and stated that only system administrators manage API keys and certificates.
- Removed non-official merchant entry links; now only references the official WeChat Pay platform.
- Addressed audit feedback by correcting mismatches between declared capabilities and real implementation needs.
- Added a section explicitly listing administrator responsibilities and the boundaries of user participation.
- Documented changes for improved transparency regarding setup and credential security.
v1.0.5
- 优化了敏感信息处理流程，证书和私钥等敏感内容由系统管理员部署，无需用户操作。
- 其他操作和功能保持不变，用户只需提供订单号和商户号即可生成付款码完成支付。
v1.0.4
- 内部描述新增：说明本技能经过微信支付的二次开发。
- 其余功能和使用方式未变。
v1.0.3
- 简化了支付接口集成部分的开发流程描述，去除了技术细节描述，使流程更简明易懂。
- 日常运营模块移除了关于交易投诉的内容。
- 精简了部分介绍和实例说明，保持核心信息不变。
- 资源链接表被移除，页面内容更为专注、简洁。
v1.0.2
- 更新说明，强调仅需订单号和商户号即可生成付款码，无需证书或私钥等敏感信息。
- 明确敏感信息无需提供，提升集成和使用的便捷性与安全性。
- 其余功能介绍和结构保持不变。
v1.0.1
- Expanded the skill description to specify 支付二维码 generation and scan payment completion.
- Removed references to loading external documentation files and made all information self-contained.
- Condensed and simplified API integration and merchant application instructions.
- Stripped out detailed API endpoint listings and authentication technicalities for brevity.
- Retained all key operational scenarios and resource links.
v1.0.0
Initial release of the WeChat Pay skill with end-to-end support:
- Guides users through merchant onboarding for WeChat Pay, including requirements and application steps.
- Provides step-by-step integration instructions for payment APIs (JSAPI, H5, Native, APP, Mini Program).
- Covers daily operations: bill reconciliation, refunds, QR code generation, marketing tools, and managing disputes.
- Links to official resources: merchant platform, development documentation, sample code, community forums, and sandbox.
- Reference files loaded per user scenario for targeted guidance.
元数据
常见问题
SKILL接入微信支付，收款码生成 是什么？
微信支付SKILL接入，实现生成微信支付二维码，完成扫码支付. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 98 次。
如何安装 SKILL接入微信支付，收款码生成？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install weixinpay-skill」即可一键安装，无需额外配置。
SKILL接入微信支付，收款码生成 是免费的吗？
是的，SKILL接入微信支付，收款码生成 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
SKILL接入微信支付，收款码生成 支持哪些平台？
SKILL接入微信支付，收款码生成 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 SKILL接入微信支付，收款码生成？
由 piaoleaf（@piaoleaf）开发并维护，当前版本 v1.0.7。
推荐 Skills