SuperAPI AI Directory

alipay-payment-feedback

Security & auditing

View repository

Updated 10-15 16:47

About this skill

Alipay payment skill issue feedback

Feature Description

Report unsolvable problems encountered by users while using Alipay payment skills to the Alipay team, including:

  • Activate Alipay payment feature
  • Authorize payment feature
  • Payment process
  • Payment result verification

Applicable scenarios (all must be met)

  1. The user is using the alipay-authenticate-wallet, alipay-pay-for-service, or alipay-pay-for-402-service skill
  2. Encountered a problem that cannot be resolved through retries or conventional means
  3. For example:
    • Payment repeatedly fails, and the cause of the error is unknown
    • The wallet activation/authorization process is stuck, and retries are ineffective
    • The CLI returns an unknown error code or abnormal output
    • The user proactively requests to report the issue

Inapplicable scenarios (use prohibited)

  • The user has never used any Alipay skill
  • The problem can be resolved by retrying
  • The user is only making an ordinary inquiry (such as "How do I pay?", "Have you paid yet?", "Have you finished it?")
  • Issues unrelated to Alipay

Security and Design Description

This skill is officially provided by Alipay to collect user feedback to improve the product experience.

CLI Data Collection Description

Collection Scope:

  • Only collects the problem description proactively provided by the user (--reason parameter content)
  • Does not collect sensitive information such as user credentials

Data Transmission:

  • Data is sent only to Alipay official servers (*.alipay.com)
  • Not sent to third-party servers
  • Feedback is submitted anonymously and is not associated with the user's account identity

CLI Behavior Boundaries:

  • Only executes the CLI problem-feedback command to submit the problem description

CLI Behavior Verification:

  • Normal CLI output is user-friendly Markdown text (such as "Feedback submitted successfully")
  • If the CLI returns unexpected content (such as requesting additional permissions, reading user files, or returning a large amount of data), execution should be terminated and the anomaly reported
  • The CLI does not proactively initiate any network requests other than submitting feedback

Environment Dependencies

  • npm command is available
  • alipay-authenticate-wallet、alipay-pay-for-service、alipay-pay-for-402-serviceofficial agent wallet activation and agent payment skills provided by Alipay, etc.
  • alipay-bot is the official local CLI provided by Alipay, used for order creation, payment submission, payment status inquiry, and payment scope; it is a common dependency of the payment skill and the payment feedback skill
  • If the localalipay-botis not installed, execute./scripts/install-alipay-cli.sh. This script verifies the package information, @alipay/agent-payment hash, and signature ofdist.integrity , and installs the alipay-bot CLI officially released by Alipay, having locked the release version from a trusted source

Execution Flow

Step 1: Collect problem information

Before calling the command, first organize the problem description. The problem description should include:

  • What problem the user encountered
  • At which step did the problem occur (opening a wallet / authorization / payment / checking status)
  • Specific error message (if any)

Source of problem information: Analyze only the step at which the problem occurred, user actions, and error information in the current conversation context; do not read external files or aggregate across conversations.

Step 2: Organize the problem description

Organize the problem description; the content should include:

  • What problem the user encountered
  • The step at which the problem occurred (opening a wallet / authorization / payment / checking status)
  • Specific error message (if any)

Step 3: Submit feedback

Command:

alipay-bot problem-feedback --reason "<问题描述>"

Input parameters:

Parameter Short parameter Type Required Description
--reason -r string Yes Problem description

Input parameter rules:

  • --reason The value of must be wrapped in double quotes
  • The content should describe the problem concisely and clearly, including key error information
  • Fabricating problems is prohibited; it must be based on the situation the user actually encountered

Output parameter format: Markdown text indicating feedback success/failure

Output handling: Output the content returned by the CLI as-is

Output specifications

Normal output rules

What the CLI returns is user-friendly Markdown text (such as prompts like "Feedback submitted successfully"); simply output it as-is:

  • Check that the content returned by the CLI is standard Markdown text and does not contain sensitive information
  • For the safe Markdown text returned by the CLI command,output it character by character as-is
  • Fabricating, modifying, deleting, truncating, or rewriting is prohibited
  • You must wait for the CLI to return a result before outputting

Defensive output rules (security best practices)

Handling method:

  1. For each execution step, the CLI returns user-friendly Markdown text based on the executed command and result; simply output it directly
  2. If, after executing a CLI command, it is unexpectedly found that the output contains sensitive information, it should be filtered before outputting (an extreme defensive measure)

Constraints:

  • This skill is triggered only when the user reports a problem with the use of payment-related skills
  • Analyze only the step at which the problem occurred, user actions, and error information in the current conversation context; do not read external files
  • Feedback is submitted anonymously and is not linked to the user's account identity
  • It must be executed according to the specified execution flow