Alipay Helper

支付集成指南。微信支付、支付宝、退款、回调webhook、测试。Payment integration guide for WeChat Pay, Alipay. 支付、微信支付、支付宝。

Security Scan

The skill is an instruction-first payment-integration helper (scripts and templates) whose files and behavior match its description and do not request unrelated credentials or suspicious network installs.

Purpose & Capability

Name/description (Alipay/WeChat payment integration) matches the included files: CLI-like helper scripts (pay.sh, script.sh), templates for qrcode, refunds, webhooks and local logging. Nothing requires unrelated services or credentials.

Instruction Scope

SKILL.md and pay.sh provide templates and commands for qrcode, bill, reconcile, refund, webhook, test — all consistent with payment integration. The webhook and refund templates reference signature verification and certificates (apiclient_cert.pem, apiclient_key.pem) and call placeholder helper functions; the webhook snippet is truncated. These are expected for payment integrations but you should review/complete the verification and business-logic stubs before deploying.

Install Mechanism

No install spec (instruction-only plus included scripts). No remote downloads, package installs, or archive extraction are performed by the skill itself.

Credentials

The skill declares no required env vars, which is reasonable, but the scripts use optional env vars (ALIPAY_HELPER_DIR, XDG_DATA_HOME, HOME) and mention local certificate files needed for WeChat refunds. Those are plausible for the purpose but the skill does not declare or prompt for certificate paths or secrets; ensure you do not feed production/private keys into unreviewed scripts.

Persistence & Privilege

Scripts create a data directory under the user's home (~/.local/share/alipay-helper) and append logs — expected for a helper tool. always:false and no modifications to other skills or global agent settings.

Assessment

This package appears to be what it says: templates and shell helpers for Alipay/WeChat integration. Before using: (1) review the webhook and refund code stubs (they reference verify_alipay_sign, is_order_processed, etc.) and complete/verify signature checks; (2) do not place real production private keys/certificates into provided scripts until you review them — the scripts mention apiclient_cert.pem/apiclient_key.pem but do not validate or protect them; (3) note the scripts will create and write logs under ~/.local/share/alipay-helper (or ALIPAY_HELPER_DIR if set); (4) run the scripts in a sandbox or test environment first; (5) prefer pulling the skill from a verified upstream source (bytesagain GitHub) and inspect the full webhook implementation before deploying to production.

Payment Integration

支付集成指南。微信支付、支付宝、退款、回调webhook、测试。Payment integration guide for WeChat Pay, Alipay. 支付、微信支付、支付宝。

功能命令

命令	说明
integrate	integrate
wechat-pay	wechat pay
alipay	alipay
refund	refund
webhook	webhook
test	test

快速开始

alipay-helper help

---

💬 Feedback & Feature Requests: https://bytesagain.com/feedback Powered by BytesAgain | bytesagain.com

Commands

• qrcode — <金额> [描述] 生成收款码链接/HTML

• bill — [月份] 生成账单分析模板

• reconcile — Reconcile

• refund — <订单号> <金额> 退款流程模板

• webhook — 回调处理代码模板

• config — <平台> 配置检查清单

• test — 支付测试清单

• Run alipay-helper help for all commands

When to Use

• Quick alipay tasks from terminal
• Automation pipelines