Skill integration of Payment Kit is a set of capabilities designed for developers and external merchants to integrate. Based on the standard accumulation process and key verification points of Payment Kit documentation, "document reading" is transformed into "task list execution" to help developers quickly integrate capabilities of Payment Kit.
By integrating the skill capabilities, you can obtain the following benefits:
- Standard integration path: minimum closed-loop for basic payment, from pre-ordering to checkout and callback processing
- Built-in key security: signature rules, SM2-based callback signature verification, signature verification before data storage, private key protection, and other redline controls
- Stability assurance: 3-second response requirement for callbacks, retry processing and idempotence policies, and rollout and switchover checklist
- Troubleshooting efficiency improvement: error code locating paths and rectification suggestions for the app and server
Capability Coverage
Currently, the following capabilities are supported:
- Basic payment (general integration logic for direct merchants/platform merchants/service providers)
- Callback signature verification (SM2) and idempotence processing methods
- Sandbox joint debugging guide and production environment switchover checklist
- Troubleshooting of common error codes (app/server)
Usage
Download the skill and place it in the skills directory of the AI coding tool. (The specifications vary with the tool. Follow the tool's requirements.) The tool can then automatically use the skill or use it as needed in conversations.
Precautions
- Private keys must not appear in clients, logs, or public repositories.
- Signature verification must be performed for the callback before the order status is updated.
- The client response must not be used as the credential for the final transaction result.
- Callback idempotence and pressure test verification must be performed before production rollout.
Statement
To protect the legitimate rights and interests of both the platform and developers, the following statement is hereby made:
- Code generation responsibility: The platform does not guarantee the correctness and security of the generated code. To use the code automatically generated using this skill document, developers must review and test the code and ensure its applicability and accuracy. Developers shall assume full responsibility for any direct or indirect losses caused by code errors, incompatibility, or improper use, including but not limited to economic losses, data loss, and system failures.
- Platform disclaimer: Developers shall select legal and compliant AI tools and strictly comply with the copyright regulations and usage guidelines of the selected AI tools. The platform is not liable for any issues arising from the use of code generated based on this skill document, including but not limited to legal disputes, third-party claims, and system running exceptions.
- Prerequisites: Before using this skill document, developers shall fully understand and accept the associated risks. It is recommended that developers perform thorough testing and verification before official rollout.
- Compliance notice: Developers shall ensure that their use complies with relevant laws, regulations, and industry standards. The platform does not guarantee or review the legality of developers' actions.
- Copyright notice: The copyright of this skill document belongs to the platform. Developers shall not tamper with, disseminate, resell, or lease this document, nor use it for purposes unrelated to integrating Payment Kit. If developers engage in the aforementioned prohibited behaviors, the platform reserves the right to pursue legal action.