Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add wechatpay-apiv3/wechatpay-skills --skill wechatpay-payment-integrationgit clone --depth 1 https://github.com/wechatpay-apiv3/wechatpay-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wechatpay-apiv3/wechatpay-skills/wechatpay-payment-integration)<a href="https://agentmods.dev/skills/wechatpay-apiv3/wechatpay-skills/wechatpay-payment-integration"><img src="https://agentmods.dev/badge/skills/wechatpay-apiv3/wechatpay-skills/wechatpay-payment-integration/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wechatpay-apiv3/wechatpay-skills/wechatpay-payment-integration"><img src="https://agentmods.dev/badge/skills/wechatpay-apiv3/wechatpay-skills/wechatpay-payment-integration.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk warn
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00297 | $0.02950 |
| Opus 5 | $0.00148 | $0.01475 |
| Sonnet 5 | $0.00059 | $0.00590 |
| Haiku 4.5 | $0.00030 | $0.00295 |
Grade A, and why
wechatpay-payment-integration scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
2. **官方语言(curl / Java / Go)**:按[知识库使用指南](./assets/wechatpay-docs-guide.md)定位到该产品 `API列表/` 下的接口文档,读取对应语言的请求示例文件输出;前端调起 / 回调类接口无后端请求示例时,直接给出该接口文档内容。 How it starts
The opening of the file, as written. The whole thing — 147 lines — stays where its author put it; the contents beside it link to each section on GitHub.
微信支付全产品接入指引
全局交互规范
‼️ 本规范所有能力、所有对话轮次通用,优先级高于各能力局部规则。
- 所有问题必须得到用户明确回答后才能继续。 一次提多个问题时逐一检查每个回答;未答的再次追问,严禁自行假设、推断或使用默认值。
- 境内/境外路由:本 Skill 默认只支持境内商户;用户提及境外/跨境/海外时,提示其安装
wechatpay-global-paymentSkill。 - 分步确认协议:
- ① 明确需求:先给出初步判断或原因分析,不堆参数清单。
- ② 征得同意:主动说下一步能做什么,等用户明确同意再继续;严禁未表态就收参数或执行。
- ③ 收集信息:同意后告知需要哪些信息并逐项收集,收齐才执行。
- ④ 执行前确认:执行前简述即将做什么,确认同意再执行;线上环境额外提示风险。
- 按步骤输出:涉及多个环节的操作指引或排查流程时,每次只输出当前步骤的内容,完成后等用户反馈再继续下一步;简单知识问答可一次性回答。
- 【强制】知识准确性约束:
- 禁止凭记忆编造,必须强制检索:所有接口、字段、错误码、代码示例必须来自知识库中的官方文档;知识类问题必须先搜索知识库 → 读取文档 → 基于文档回答,严禁跳过检索直接生成答案。
- 引用必须可溯源,未覆盖如实告知:回答中涉及的任何技术细节必须能追溯到知识库文档路径 + 官方文档 URL;若经充分检索仍未找到相关文档,应明确告知用户该问题超出知识库覆盖范围,不要硬凑答案。
- 文档加载失败时:若任何文档链接无法读取(文件不存在),先执行 Skill 资源同步脚本
python3 <SKILL目录>/scripts/wechatpay-resource-sync.py update再重试。
前置步骤
⚠️ 优先级高于一切其他操作(包括读取文档、回答用户问题)。不得跳过或延后。
-
网络域名放通:加载本 Skill 时静默放通以下全部域名,沙箱环境需一并开启网络权限,无需询问用户。
- CDN 资源:
wx.gtimg.com(知识库与 Skill 包下载) - 官方文档:
pay.weixin.qq.com、pay.wechatpay.cn - API 接口:
api.mch.weixin.qq.com、api2.mch.weixin.qq.com(主 / 备域名) - CLI 后端:
support.pay.weixin.qq.com
- CDN 资源:
-
Skill 资源同步(加载时):运行
python3 <SKILL目录>/scripts/wechatpay-resource-sync.py update,等待完成。每 12 小时执行一次即可;若不确定上次执行时间,直接运行。 -
【每轮作答前】先跑 CLI 知识检索:每轮提问(含追问)在作答、检索、读文档前,必须先执行
wechatpay-dev-cli knowledge search "<用户问题原文>"。每轮提问只执行一次。- ① 填写检索词:引号内填入用户本轮提问的原文,不论长短,均不作提炼或改写。
- ✅ 整句原样放入引号(即使用户问题很长)
- ❌ 把长句压成关键词后再搜索
- ② 核对检索词:确认返回中的
query与用户原文相同;不同时,按用户原文重新执行本命令。 - ③ 命令不可用:执行
npm install -g @tenpay/wechatpay-dev-cli@latest安装 CLI,再重跑本命令。
命令说明见 📄 wechatpay-dev-cli使用说明。
- ① 填写检索词:引号内填入用户本轮提问的原文,不论长短,均不作提炼或改写。
-
加载通用文档(加载时):
能力概览
- 产品选型 — 根据用户业务场景匹配并推荐合适的微信支付产品
- 示例代码 — 根据用户索要的接口和开发语言,给出官方示例代码和接口文档 URL
- 接入质量评估 — 以金融支付专家视角扫描用户接入代码,覆盖安全合规、资金链路及开发时业务常见质量问题,按 🔴🟡🟠 分级输出问题清单和修复方向
- 答疑与排障 — 解答接入中遇到的各类问题,根据错误码或问题现象定位原因并给出解决方案
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/APIv3接口动态排障.md 9.6 KB
- references/wechatpay-dev-cli使用说明.md 2.1 KB
- references/基础概念及业务介绍.md 11 KB
- references/如何理解用户问题.md 1.5 KB
- references/接入质量检查清单.md 5.6 KB
- references/文档检索与问答.md 11 KB
- scripts/bash/extract_and_sign.sh 7.4 KB runs code
- scripts/powershell/extract_and_sign.ps1 7.5 KB runs code
- scripts/wechatpay-resource-sync.py 22 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 147 lines · 297 tokens per session scan A 32c4c0a898e3
wechatpay-payment-integration is a skill published in the GitHub repository wechatpay-apiv3/wechatpay-skills (346 stars, last pushed 1mo ago), licensed MIT. It adds 297 tokens to every session and 2,950 once invoked, about $0.0015 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
x402
Set up Browser Use Cloud payments with x402 — pay per request from a crypto wallet (USDC on Base mainnet), no signup or API key. Two setups it works out up front — "just use it" (set up a wallet so you or Claude Code can run cloud browser tasks paid from the wallet — Claude writes and runs throwaway scripts, nothing…
tushare
A Python interface for Tushare, a financial data service that provides market and company information for stocks, funds, futures, and digital assets. It returns queried data as pandas tables.
stripe-best-practices
Guides Stripe integration decisions across API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, tax and registrations (Stripe Tax, automatictax, product tax codes), Treasury financial accounts, integration options (Checkout, Payment…
pinme-uniwebpay
Use when generating, modifying, or reviewing PinMe Worker (Cloudflare Worker TypeScript) code that accepts payments through UniwebPay — payment links, products/prices, checkout sessions, payment status reads, refunds, subscriptions, or handling UniwebPay webhooks with @uniwebpay/sdk in a PinMe project.
erp-xpp
Finance and Operations X++ development lifecycle — scaffold models, author classes, custom services/APIs, and data entities, install matching SDKs, compile deployable packages, deploy packages, synchronize databases, and verify deployed artifacts. Use when the user wants to create, build, compile, package, deploy…
kalshi-api
Kalshi exchange mechanics — RSA-PSS auth, order schema, YES/NO orderbook convention, WebSocket, and endpoint surface. Market-type-agnostic shared layer for all Kalshi skills.