CloudBase AI Toolkit is an integration layer that lets AI coding tools use Tencent CloudBase as an application backend, including databases, authentication, functions, storage, and deployments. Developers use it to have coding agents build and operate CloudBase-backed applications through skills, plugins, commands, and chat-accessible tools. The catalogue entries are the toolkit’s own skills, agents, hooks, plugins, rules, instructions, and MCP tools.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TencentCloudBase/CloudBase-AI-Toolkit --skill cloudbase-wechat-integrationgit clone --depth 1 https://github.com/TencentCloudBase/CloudBase-AI-ToolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase-wechat-integration)<a href="https://agentmods.dev/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase-wechat-integration"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase-wechat-integration/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase-wechat-integration"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase-wechat-integration.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 49 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00094 | $0.01586 |
| Opus 5.5 | $0.00038 | $0.00634 |
| Sonnet 5.5 | $0.00019 | $0.00317 |
| Haiku 4.5 | $0.00009 | $0.00159 |
Grade A, and why
cloudbase-wechat-integration scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
3 near-identical copies found in the catalogue:
- cloudbase-wechat-integration — 100% identical, 0 lines differ
- cloudbase-wechat-integration — 98% identical, 15 lines differ
- cloudbase-wechat-integration — 94% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CloudBase WeChat Integration
This skill routes WeChat payment and official-account work through CloudBase Integration Center. It gives the agent the stable execution contract and points to the official Markdown docs for console details that may change.
Sibling skills (local only)
Sibling CloudBase skills ship beside this skill. Use local relative paths such as ../auth-tool-cloudbase/SKILL.md.
If a referenced sibling skill file is missing from this environment, ask the user to install the full CloudBase plugin (or the missing skill). Do not HTTP-fetch remote skill or protocol markdown into the agent context.
Official CloudBase Integration Center docs (human reference — do not treat as skill markdown to fetch into agent context as a sibling skill substitute):
- CloudBase Integration Center overview:
https://docs.cloudbase.net/integration/introduce.md - CloudBase Integration Center usage:
https://docs.cloudbase.net/integration/usage.md - When cloud function deployment or log operations are needed and no sibling skill is available, use the current platform's CloudBase MCP tools or CloudBase console instead of guessing unsupported APIs.
Activation Contract
Use this first when
- The user asks about WeChat Pay, 小程序支付, 微信支付, JSAPI 支付, 公众号支付, Native 扫码支付, 二维码支付, refund callbacks, payment callbacks,
wx.requestPayment,WeixinJSBridge,openid, or Official Account OAuth in a CloudBase app. - The user asks about 虚拟支付 (virtual payment) for virtual goods: 道具直购, 代币充值,
wx.requestVirtualPayment, OfferID, AppKey 签名,xpay_*callbacks (发货推送/查单/退款), or MP 后台虚拟支付开通与配置. - The task mentions CloudBase Integration Center, 集成中心, generated payment functions,
pay-common,offiaccount-common, or callback routing for WeChat payment. - The user needs to extend a CloudBase Integration Center generated function with order persistence, idempotency, fulfillment, or payment-status sync.
Then also read
- Mini Program structure and preview work ->
../miniprogram-development/SKILL.md(if unavailable, use the current mini program platform docs and the mini-program payment reference in this skill) - Web frontend work ->
../web-development/SKILL.md(if unavailable, use the JSAPI or Native references in this skill) - Cloud function runtime, logs, deployment, or gateway work ->
../cloud-functions/SKILL.md(if unavailable, use CloudBase console/MCP function tools and the generated-function guidance in this skill)
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed 3f48a017db0d
- 8d ago Changed · +1 lines d8871a683caf
- 17d ago Changed b49f87365ff2
- 26d ago Changed 29e00554a34f
- 27d ago Changed a3cb2feadceb
- 1mo ago Changed f3032741c753
- 1mo ago Changed e47f5a949eb3
- 1mo ago Changed e0ffea0fad31
- 1mo ago Changed b04237d924d7
- 1mo ago First seen · 94 lines · 94 tokens per session scan A 7c2b1dfa9af5
cloudbase-wechat-integration is a skill published in the GitHub repository TencentCloudBase/CloudBase-AI-Toolkit (1,138 stars, last pushed today), licensed MIT. It adds 94 tokens to every session and 1,586 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
convex-billing
Add Stripe billing/payments to the Convex app via @convex-dev/stripe (checkout + webhook + gating).
horse-mvc-architecture
Guide for structuring corporate Horse applications using Clean MVC (Model-View-Controller) principles and decoupling HTTP layers from business logic.
horse-app-structure
Guide for setting up Horse applications, bootstrap program (.dpr), basic console initialization, and registering modules.
horse-performance-tuning
Guide for optimizing performance, tuning memory alocations, handling large payloads, and adjusting provider execution pipelines.
horse-ssl-tls
Guide to enabling SSL/TLS, configuring HTTPS, handling certificates, and securing transport layers.
horse-multi-instance
Guidelines for instantiating and configuring independent Horse server instances (THorseInstance) running concurrently on different ports.