alipay-aipay-product-intro
v1.0.0当用户想要获取支付宝智能体钱包/AI支付相关产品介绍时，你应该调用此技能。买家通过本 Skill 向卖家服务端发起请求，完成支付后获取相关结果。
⭐ 0· 23·0 current·0 all-time
by@alipay
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name and description state this is an Alipay product-intro-and-payment handoff; the SKILL.md only asks the agent to GET a specific Alipay URL and forward a 402 Payment-Needed response to the alipay-pay-for-402-service skill, which is coherent with the described purpose.
Instruction Scope
Runtime instructions are narrowly scoped: perform a single HTTP request to aipayapi.alipay.com, inspect the response code, and if 402 forward the full response to the specified payment skill. The instructions do not ask the agent to read unrelated files, environment variables, or other system state.
Install Mechanism
No install spec and no code files — instruction-only skill — so nothing is written to disk and no external packages or downloads are requested.
Credentials
The skill declares no environment variables, credentials, or config paths. That matches the simple network-request-and-handoff behavior described.
Persistence & Privilege
always is false and the skill does not request persistent privileges or modify other skills/config; autonomous invocation is allowed by platform default but this skill's actions remain limited and proportional.
Assessment
This skill is internally consistent: it makes a single HTTP request to an Alipay endpoint and forwards a 402 response to another payment skill to complete payment. Before installing, confirm you trust the agent's network access and the downstream alipay-pay-for-402-service skill (that skill will handle payment and may require credentials). Also confirm the endpoint (aipayapi.alipay.com) is legitimate for your use case and ensure users explicitly consent before initiating any payment flow. Because this is instruction-only (no code), there were no static scan findings — you should still review the payment-handling skill and any credentials it requires before enabling payment operations.Like a lobster shell, security has layers — review code before you run it.
latestvk976vh5m8b00t2s7bq4nb1223584y1rq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.