CloudBase WeChat integration guide for Mini Program WeChat Pay, Official Account JSAPI Pay, Native QR-code Pay, Official Account OAuth, openid handling, payment callbacks, and CloudBase Integration Center generated functions. This skill should be used when users ask to add, debug, or extend WeChat payment or official-account flows on CloudBase.
npx skills add https://github.com/TencentCloudBase/CloudBase-AI-Toolkit --skill cloudbase-wechat-integration
This skill routes WeChat payment and official-account work through CloudBase Integration Center. It gives the agent the stable execution contract and points to official index.md docs for console details that may change.
This skill is designed to work when distributed independently on platforms such as OpenClaw. If sibling CloudBase skills are unavailable, use the references in this skill directory plus the official index.md documentation links in each reference file.
https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/cloudbase/SKILL.mdhttps://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/cloudbase/references/cloudbase-wechat-integration/SKILL.mdhttps://docs.cloudbase.net/integration/introduce/index.mdhttps://docs.cloudbase.net/integration/usage/index.mdwx.requestPayment, WeixinJSBridge, openid, or Official Account OAuth in a CloudBase app.pay-common, offiaccount-common, or callback routing for WeChat payment.../miniprogram-development/SKILL.md (standalone fallback: https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/cloudbase/references/miniprogram-development/SKILL.md; if unavailable, use the current mini program platform docs and the mini-program payment reference in this skill)../web-development/SKILL.md (standalone fallback: https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/cloudbase/references/web-development/SKILL.md; if unavailable, use the JSAPI or Native references in this skill)../cloud-functions/SKILL.md (standalone fallback: https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/cloudbase/references/cloud-functions/SKILL.md; if unavailable, use CloudBase console/MCP function tools and the generated-function guidance in this skill)index.md docs for console UI steps and credential fields; do not copy stale console screenshots or invent field names.pay-common and offiaccount-common are examples; ask for or inspect the actual function name before writing calls.| Task | Read | Why |
| --- | --- | --- |
| Capability selection, console-first boundaries, independent distribution | references/overview.md | Establishes the Integration Center model and safety rules |
| Mini Program WeChat Pay, wx.cloud.callHTTPFunction, wx.requestPayment | references/mini-program-pay.md | Covers Mini Program openid injection, order creation, and callback expectations |
| Official Account JSAPI pay, H5 inside WeChat, WeixinJSBridge.invoke | references/official-account-jsapi-pay.md | Covers official-account openid and JSAPI invocation |
| Native QR-code pay for PC/Web checkout | references/native-qr-pay.md | Covers code_url, QR rendering, and polling/query flow |
| Official Account OAuth, openid/userinfo retrieval | references/official-account-oauth.md | Covers OAuth routes generated by the official-account integration |
| 404, missing credentials, openid mismatch, callback failures, logs | references/troubleshooting.md | Provides diagnosis steps before changing code |
index.md docs linked there.pay-common?All packaged reference files (required for skill lint reachability):
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password authentication with verification, OAuth providers (Google, GitHub, Discord, etc.), two-factor authentication (TOTP, SMS), passkeys/WebAuthn support, session management, role-based access control (RBAC), rate limiting, and database adapters. Use when adding authentication to applications, implementing OAuth flows, setting up 2FA/MFA, managing user sessions, configuring authorization rules, or building secure authentication systems for web applications.
Package entire code repositories into single AI-friendly files using Repomix. Capabilities include pack codebases with customizable include/exclude patterns, generate multiple output formats (XML, Markdown, plain text), preserve file structure and context, optimize for AI consumption with token counting, filter by file types and directories, add custom headers and summaries. Use when packaging codebases for AI analysis, creating repository snapshots for LLM context, analyzing third-party libraries, preparing for security audits, generating documentation context, or evaluating unfamiliar codebases.
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Expert patterns for HubSpot CRM integration including OAuth authentication, CRM objects, associations, batch operations, webhooks, and custom objects. Covers Node.js and Python SDKs.
Perform language and framework specific security best-practice reviews and suggest improvements. Use when the user explicitly requests security best practices guidance, a security review or report, or secure-by-default coding help. Supports Python, JavaScript/TypeScript, and Go. Do NOT use for general code review, debugging, threat modeling (use security-threat-model), or non-security tasks.
Configures API gateways for routing, authentication, rate limiting, and request transformation in microservice architectures. Use when setting up Kong, Nginx, AWS API Gateway, or Traefik for centralized API management.
Take tencentcloudbase/cloudbase-wechat-integration from the repository into ~/.claude/skills for personal
use, or into .claude/skills inside a project.
The agent identifies a skill by the name field in its header. Two skills with the
same name cannot sit side by side — one of them will be ignored.