SkillPay One-Click Upgrade

Problem

The skill targets the repetitive engineering work of turning an existing Skill into a Pay Skill: wiring WeChat order creation, X402 preorder, WeixinPay-Required responses, post-payment query, idempotent fulfillment, and keeping private keys or certificates out of the package. It turns that process into a repeatable upgrade generator. It suits engineers who already have merchant credentials and published Skills that need a consistent paid workflow.

How It Works

After providing the target Skill path, server / local deployment mode, order provider, SkillHub identifiers, WeChat merchant details, and pricing, it runs preflight checks, renders templates, writes the payment module, and updates SKILL.md. Key capabilities include:
- internal / external ordering: internal generates WeChat v3 signatures, while external exposes hooks such as create_external_order.
- Support for Native, JSAPI, and H5 payment data, with order numbers using the WX402_ prefix.
- Post-payment retry and query via X-Out-Trade-No, with SQLite idempotent fulfillment; repeated requests return already_fulfilled: true.
- secret_scanner.py runs after writes and aborts if real private keys or skh_ tokens are detected.
- The upgrade flags blocking gaps instead of inventing missing configuration.

Boundaries

It performs the upgrade only; it does not complete WeChat merchant onboarding, implement business content, or auto-publish. external mode requires the developer to implement external ordering and query, and production callbacks still need signature verification, amount checks, and replay protection.