WeChat Pay Integration

• Analyzed: May 11, 2026, 10:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: a5f91a9fc488b6a352e0e154e0f14b8beebbe7a1d8a63649c1c58f6b0e9d8205
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle is a comprehensive WeChat Pay integration assistant providing Python and Node.js code examples and documentation. The SKILL.md file contains safety-oriented instructions for the AI agent, such as prohibiting direct file writes to the user's project and requiring explicit confirmation for all parameters to prevent hallucinations. The code examples (e.g., signature_demo.py, JSAPI支付.md) correctly implement the WeChat Pay V3 API using standard libraries like cryptography and axios, and all external endpoints are official WeChat domains (api.mch.weixin.qq.com). No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.