Build CloudBase WeChat Payment Flows
WeChat Pay and Official Account OAuth on CloudBase require correct generated functions, openid types, and callback checks. This skill guides Claude, Codex, and Claude Code through scenario setup, client calls, and safe extension patterns.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "cloudbase-wechat-integration" from https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-cloudbase-wechat-integration/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "cloudbase-wechat-integration". I need JSAPI Pay in a WeChat Official Account page.
Expected outcome:
The skill identifies JSAPI Pay, requires an Official Account openid, asks for the generated function route, and confirms payment through callback or query.
Using "cloudbase-wechat-integration". My Mini Program payment succeeds, but the order is not fulfilled.
Expected outcome:
The skill checks whether frontend success is being trusted, then directs review of callback logs, order queries, and idempotent fulfillment logic.
Using "cloudbase-wechat-integration". I need Native QR-code payment for a web checkout.
Expected outcome:
The skill separates Native Pay from JSAPI Pay, plans QR rendering from code_url, and waits for callback or polling confirmation before fulfillment.
Reviewed all static findings against the skill content and found them to be documentation false positives. The skill gives defensive CloudBase WeChat integration guidance, references official docs, and warns users to keep merchant secrets out of code and chat. No prompt injection, data exfiltration intent, or executable malicious behavior was found.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-wechat-integration/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/tencentcloudbase-cloudbase-wechat-integration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>tencentcloudbase. (2026). cloudbase-wechat-integration security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration/audits/2@techreport{tencentcloudbase-tencentcloudbase-cloudbase-wechat-integration-2026,
author = {tencentcloudbase},
title = {cloudbase-wechat-integration security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration/audits/2},
note = {Author version 2.23.8}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloudbase-wechat-integration security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
- name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-cloudbase-wechat-integration/audits/2"
identifiers:
- type: other
value: "skillstore:tencentcloudbase-cloudbase-wechat-integration:audit:2"
description: "Skillstore immutable audit report identifier"
Guide a Mini Program checkout through generated payment functions, requestPayment, and server-side confirmation.
Plan OAuth openid retrieval and JSAPI payment inside the WeChat browser.
Trace 404 errors, missing credentials, callback failures, and openid mismatches before changing code.
Help me choose the correct CloudBase WeChat integration flow for my app. Ask for the client type, payment type, and whether OAuth is needed.
Guide me through adding Mini Program WeChat Pay with CloudBase Integration Center. Include the generated function name, requestPayment step, and callback confirmation.
Design an Official Account JSAPI payment flow on CloudBase. Include OAuth openid retrieval, generated function calls, and order status verification.
Review my CloudBase generated payment function extension plan. Check order persistence, idempotency, amount validation, callback handling, and secret boundaries.
Author
tencentcloudbaseLicense
MIT
Author version
v2.23.8
Skillstore revision
r1
Ref
24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec
Maintenance freshness
7/18/2026
Usage
1 downloads · 0 views
File structure
Build CloudBase Node Auth Flows
Server-side CloudBase auth work can mix caller identity, user lookup, and custom login details. This skill guides Node.js agents through correct SDK methods and secure backend patterns.
Build CloudBase Mini Program Database Features
Mini Program database work requires correct SDK patterns and security rules. This skill guides Claude, Codex, and Claude Code through CloudBase document database tasks.
Build CloudBase AI Backends in Node.js
Backend AI setup often fails when model groups, credits, and SDK methods are guessed. This skill gives CloudBase Node.js patterns, preflight checks, and model enablement steps.
Design Distinctive UI Prototypes
Generic AI interfaces often lack visual direction and platform-aware detail. This skill guides Claude, Codex, and Claude Code to define design intent before building prototypes.
Plan Complex Coding Changes
Large coding changes often fail when scope, design, and acceptance criteria are vague. This skill guides Claude, Codex, and Claude Code through requirements, design, tasks, and staged confirmation.
Add CloudBase AI Models to Web Apps
Browser AI integration can fail when model groups, auth, or Token Credits are not prepared. This skill guides CloudBase preflight, model enabling, and SDK calls for web apps.
Build WooCommerce Stores with Guided Workflows
by sickn33
WooCommerce builds require coordinated setup, payment, shipping, design, and testing work. This skill gives Claude, Codex, and Claude Code a phased workflow for store delivery.
Build Credit Purchase and Balance Flows
by AayushBaniya2006
Credit features can fail when pricing, balances, and UI flows become inconsistent. This skill guides credit types, purchase flows, balance displays, and allocation helpers.
Build Modern Stripe Integrations
by anthropics
Stripe offers several APIs, and outdated choices can create migration or payment risks. This skill recommends current integration patterns for payments, subscriptions, and platforms.
Build E-commerce Systems
by DaichiHoshina
E-commerce teams need clear models for products, carts, orders, payment, and inventory. This skill guides Claude, Codex, and Claude Code through practical architecture, checkout, compliance, and review workflows.
Build Secure Payment Integrations
by sickn33
Payment features fail when checkout, subscriptions, and webhooks are built without clear security controls. This skill guides secure processor integrations with practical validation, retry, and compliance checks.
Build Secure Auth and Payments
by Chachamaru127
Authentication and payment work is high risk and often spans SDK setup, routes, webhooks, and environment variables. This skill guides Claude, Codex, and Claude Code through Clerk, Supabase Auth, and Stripe implementation steps.