fintech-code-review

Audit fintech code for financial correctness, idempotency, and security.

2|Updated Jan 2, 2026
One-click install
npx skills add https://github.com/abdullahbokl/Boklo-Wallet --skill fintech-code-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fintech-code-review
Source: https://github.com/abdullahbokl/Boklo-Wallet/tree/main/.agent/skills/fintech-code-review
Command: npx skills add https://github.com/abdullahbokl/Boklo-Wallet --skill fintech-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviews backend and Flutter code with FinTech-grade rigor to ensure financial correctness, idempotency, and race-condition safety.

Core Features & Use Cases

  • Financial correctness checks: enforce integer monetary handling and proper sign conventions.
  • Idempotency & concurrency: verify idempotent transaction flows and safe ledger updates within transactions.
  • Security & compliance: ensure backend actions use service accounts and resist client spoofing.

Quick Start

Review a transaction-related PR by focusing on financial correctness, idempotency, and security.

Frequently Asked Questions about fintech-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Flutter code for financial correctness during transaction processing?

Review Flutter code for financial correctness by enforcing integer monetary handling and proper sign conventions. This prevents rounding errors and ensures transaction balances are calculated accurately during client-side operations.

How do I check Firestore transaction safety and idempotency in a backend PR?

Check Firestore transaction safety by verifying idempotency keys and ensuring ledger updates occur strictly within transactions. This prevents race conditions and duplicate financial entries during concurrent backend transaction processing.

Why does my fintech backend require service accounts instead of client credentials?

Fintech backends require service accounts to resist client spoofing and enforce secure compliance. Relying on client credentials exposes financial operations to unauthorized manipulation and breaks security boundaries.

What is the best way to audit Firestore ledger updates for race conditions?

The best way to audit Firestore ledger updates for race conditions is to enforce transactional boundaries. Verify that all balance reads and writes happen atomically within a single Firestore transaction block.

When do I need explicit idempotency keys for transaction processing?

You need explicit idempotency keys for transaction processing whenever network retries or concurrent requests might occur. They ensure duplicate operations do not result in double charges or repeated ledger entries.

Can I use this code review approach for both Cloud Functions and Flutter clients?

Yes, you can use this code review approach for both Cloud Functions and Flutter clients. It audits backend ledger updates and frontend transaction triggers to ensure end-to-end financial correctness.