Build WeChat Mini Program Auth with CloudBase
WeChat Mini Program auth is easy to misapply when CloudBase identity is automatic. This skill gives practical patterns for wx.cloud, OPENID, UNIONID, and cloud functions.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "auth-wechat-miniprogram" from https://skillstore.io/skills/tencentcloudbase-auth-wechat-miniprogram.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-auth-wechat-miniprogram/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "auth-wechat-miniprogram". User asks how to identify the caller in a CloudBase cloud function.
Expected outcome:
The assistant explains CloudBase caller context, when UNIONID appears, and how to return only required identity fields.
Using "auth-wechat-miniprogram". User needs Mini Program auth setup for a new CloudBase app.
Expected outcome:
The assistant asks for the environment ID, confirms CloudBase binding, and outlines initialization during app launch.
Using "auth-wechat-miniprogram". User wants to protect user-owned records in a Mini Program.
Expected outcome:
The assistant recommends server-side ownership checks with OPENID and warns against trusting client-supplied owner fields.
Static detections are false positives caused by Markdown inline code, fenced JavaScript examples, reference URLs, and sibling skill paths. The review found two medium-risk content issues: an authorization example that relies on client-supplied owner data and examples that log sensitive identifiers.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/tencentcloudbase-auth-wechat-miniprogram/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/tencentcloudbase-auth-wechat-miniprogram?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/tencentcloudbase-auth-wechat-miniprogram?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-auth-wechat-miniprogram/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/tencentcloudbase-auth-wechat-miniprogram.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>tencentcloudbase. (2026). auth-wechat-miniprogram security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-auth-wechat-miniprogram/audits/2@techreport{tencentcloudbase-tencentcloudbase-auth-wechat-miniprogram-2026,
author = {tencentcloudbase},
title = {auth-wechat-miniprogram security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/tencentcloudbase-auth-wechat-miniprogram/audits/2},
note = {Author version 2.23.8}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "auth-wechat-miniprogram security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
- name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-auth-wechat-miniprogram/audits/2"
identifiers:
- type: other
value: "skillstore:tencentcloudbase-auth-wechat-miniprogram:audit:2"
description: "Skillstore immutable audit report identifier"
Add native CloudBase identity handling to a WeChat Mini Program without building a separate login page.
Check how a cloud function reads OPENID, APPID, and UNIONID before using user-specific data.
Decide whether a feature should use native Mini Program identity or a separate Web authentication flow.
Use this skill to add native WeChat Mini Program auth to my CloudBase app. Ask me for missing env details first.
Create a cloud function pattern that reads OPENID, APPID, and UNIONID with wx-server-sdk. Include error handling guidance.
Help me design user-specific database access for a Mini Program. Use OPENID safely and avoid exposing identifiers.
Review my Mini Program CloudBase auth flow for native login assumptions, unsafe authorization checks, and production logging risks.
Author
tencentcloudbaseLicense
MIT
Author version
v2.23.8
Skillstore revision
r1
Ref
24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec
Maintenance freshness
7/18/2026
Usage
1 downloads · 0 views
File structure
📄 SKILL.md
Build CloudBase Node Auth Flows
Server-side CloudBase auth work can mix caller identity, user lookup, and custom login details. This skill guides Node.js agents through correct SDK methods and secure backend patterns.
Build CloudBase Mini Program Database Features
Mini Program database work requires correct SDK patterns and security rules. This skill guides Claude, Codex, and Claude Code through CloudBase document database tasks.
Build CloudBase AI Backends in Node.js
Backend AI setup often fails when model groups, credits, and SDK methods are guessed. This skill gives CloudBase Node.js patterns, preflight checks, and model enablement steps.
Design Distinctive UI Prototypes
Generic AI interfaces often lack visual direction and platform-aware detail. This skill guides Claude, Codex, and Claude Code to define design intent before building prototypes.
Plan Complex Coding Changes
Large coding changes often fail when scope, design, and acceptance criteria are vague. This skill guides Claude, Codex, and Claude Code through requirements, design, tasks, and staged confirmation.
Add CloudBase AI Models to Web Apps
Browser AI integration can fail when model groups, auth, or Token Credits are not prepared. This skill guides CloudBase preflight, model enabling, and SDK calls for web apps.
Design Production-Ready APIs
by AutumnsGrove
Inconsistent API contracts create integration errors and costly migrations. This skill guides REST, GraphQL, OpenAPI, authentication, versioning, validation, and documentation decisions.
Set Up Convex Authentication
by get-convex
Convex auth setup can fail when provider wiring, environment variables, and backend checks do not match. This skill guides the correct provider flow and adds verified Convex authentication patterns.
Configure Azure Identity for Rust
by sickn33
Azure authentication choices can be difficult to match to each runtime. This skill provides focused Rust examples for local tools, managed identities, and service principals.
Build Consistent FastAPI Routers
by sickn33
FastAPI endpoints become inconsistent when authentication, models, and status codes vary. This skill provides concise router patterns and integration steps for reliable API development.
Implement Expo Authentication Flows
by CJHarmath
Expo authentication often fails because OAuth redirects, token storage, and route guards must align across app and backend. This skill provides concrete React Native patterns for Google sign-in, secure token handling, protected routes, and backend token verification.
Configure Azure Identity for .NET
by sickn33
Azure authentication choices vary across local development and hosted workloads. This skill provides focused Azure Identity patterns for secure .NET client configuration.