payment-review

Validate payment flow security for Paybox and SystemPay gateways.

1|Updated Nov 12, 2024
One-click install
npx skills add https://github.com/ak125/nestjs-remix-monorepo --skill payment-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: payment-review
Source: https://github.com/ak125/nestjs-remix-monorepo/tree/main/.claude/skills/payment-review
Command: npx skills add https://github.com/ak125/nestjs-remix-monorepo --skill payment-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill ensures the security and integrity of payment processing by validating critical security mechanisms like HMAC signatures, callback handling, and order data normalization, preventing vulnerabilities and financial fraud.

Core Features & Use Cases

  • HMAC Signature Verification: Confirms the authenticity and integrity of payment gateway callbacks.
  • Callback Validation: Ensures that payment callbacks are processed correctly and securely, preventing replay attacks.
  • Order Normalization: Guarantees consistent order matching between the system and payment gateway.
  • Configuration Audit: Checks for secure and correct gateway configuration in production environments.
  • Use Case: Before merging any code changes related to the payment module, run this skill to automatically audit the security of the payment flow, ensuring no vulnerabilities are introduced.

Quick Start

Run the payment-review skill to audit the security of the payment flow for Paybox and SystemPay.

Frequently Asked Questions about payment-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate HMAC signatures for payment gateway callbacks in Paybox and SystemPay?

HMAC signature validation confirms the authenticity and integrity of Paybox and SystemPay payment callbacks. This Skill audits signature comparisons to prevent timing attacks and ensures financial transaction compliance.

What security anti-patterns should I audit for in a payment processing flow?

Security audits for payment processing should target timing attacks, insecure signature comparisons, and exposed test endpoints. This Skill identifies these anti-patterns and audits gateway configurations for production security.

How do I prevent replay attacks during payment callback handling?

Preventing replay attacks during payment callback handling requires strict callback validation. This Skill ensures callbacks are processed securely and verifies order normalization between your system and the payment gateway.

Does this payment security audit work with both Paybox and SystemPay gateways?

Yes, this payment security audit works with both Paybox and SystemPay gateways. It validates HMAC signatures, handles callback processing, and normalizes order data specifically for these two payment platforms.

How do I ensure order normalization matches between my system and the payment gateway?

Ensuring order normalization matches between your system and the payment gateway is achieved by validating consistent order data. This Skill guarantees order matching to prevent discrepancies and vulnerabilities during payment processing.

When should I run a payment flow security review before merging code changes?

You should run a payment flow security review before merging any code changes related to the payment module. This automatically audits HMAC signatures and gateway configurations, ensuring no vulnerabilities are introduced into production.