Skills cloudbase-wechat-integration

📦

cloudbase-wechat-integration

Name: cloudbase-wechat-integration
Author: tencentcloudbase

v2.23.8 Content revision r1 Safe 🌐 Network access⚙️ External commands📁 Filesystem access

Build CloudBase WeChat Payment Flows

WeChat Pay and Official Account OAuth on CloudBase require correct generated functions, openid types, and callback checks. This skill guides Claude, Codex, and Claude Code through scenario setup, client calls, and safe extension patterns.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "cloudbase-wechat-integration" from https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-cloudbase-wechat-integration/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/tencentcloudbase-cloudbase-wechat-integration.md Signed manifest GET /api/skills/tencentcloudbase-cloudbase-wechat-integration/manifest Signed lockfile GET /api/skills/tencentcloudbase-cloudbase-wechat-integration/lockfile

Test it

Using "cloudbase-wechat-integration". I need JSAPI Pay in a WeChat Official Account page.

Expected outcome:

The skill identifies JSAPI Pay, requires an Official Account openid, asks for the generated function route, and confirms payment through callback or query.

Using "cloudbase-wechat-integration". My Mini Program payment succeeds, but the order is not fulfilled.

Expected outcome:

The skill checks whether frontend success is being trusted, then directs review of callback logs, order queries, and idempotent fulfillment logic.

Using "cloudbase-wechat-integration". I need Native QR-code payment for a web checkout.

Expected outcome:

The skill separates Native Pay from JSAPI Pay, plans QR rendering from code_url, and waits for callback or polling confirmation before fulfillment.

Security Audit

Safe

v2 • 7/9/2026 Open versioned report

Reviewed all static findings against the skill content and found them to be documentation false positives. The skill gives defensive CloudBase WeChat integration guidance, references official docs, and warns users to keep merchant secrets out of code and chat. No prompt injection, data exfiltration intent, or executable malicious behavior was found.

Files scanned

541

Lines analyzed

Review items

False positives ignored

Risk Factors

🌐 Network access (9)

references/native-qr-pay.md:33 references/official-account-oauth.md:41 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:32 SKILL.md:33 SKILL.md:34

⚙️ External commands (21)

📁 Filesystem access (3)

SKILL.md:32 SKILL.md:33 SKILL.md:34

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-wechat-integration/security.svg)](https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-wechat-integration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/tencentcloudbase-cloudbase-wechat-integration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

tencentcloudbase. (2026). cloudbase-wechat-integration security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration/audits/2

BibTeX citation

@techreport{tencentcloudbase-tencentcloudbase-cloudbase-wechat-integration-2026,
  author = {tencentcloudbase},
  title = {cloudbase-wechat-integration security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration/audits/2},
  note = {Author version 2.23.8}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloudbase-wechat-integration security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
  - name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration/audits/2"
identifiers:
  - type: other
    value: "skillstore:tencentcloudbase-cloudbase-wechat-integration:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Add Mini Program Payment

Guide a Mini Program checkout through generated payment functions, requestPayment, and server-side confirmation.

Implement Official Account Checkout

Plan OAuth openid retrieval and JSAPI payment inside the WeChat browser.

Diagnose Payment Integration Failures

Trace 404 errors, missing credentials, callback failures, and openid mismatches before changing code.

Try These Prompts

Choose the Payment Flow

Help me choose the correct CloudBase WeChat integration flow for my app. Ask for the client type, payment type, and whether OAuth is needed.

Wire Mini Program Pay

Guide me through adding Mini Program WeChat Pay with CloudBase Integration Center. Include the generated function name, requestPayment step, and callback confirmation.

Build Official Account JSAPI Pay

Design an Official Account JSAPI payment flow on CloudBase. Include OAuth openid retrieval, generated function calls, and order status verification.

Extend Generated Payment Logic

Review my CloudBase generated payment function extension plan. Check order persistence, idempotency, amount validation, callback handling, and secret boundaries.

Best Practices

Confirm the actual generated function name and route before writing client calls.
Use callbacks or order queries as the authoritative payment state.
Keep merchant secrets, AppSecret values, keys, and certificates in CloudBase console configuration.

Avoid

Do not hard-code example function names when the console generated different names.
Do not fulfill orders based only on frontend payment success callbacks.
Do not paste merchant secrets, private keys, certificates, or AppSecret values into chat or source code.