What problem does it solve?
This Skill ensures the security and integrity of payment processing by validating critical security mechanisms like HMAC signatures, callback handling, and order data normalization, preventing vulnerabilities and financial fraud.
Core Features & Use Cases
- HMAC Signature Verification: Confirms the authenticity and integrity of payment gateway callbacks.
- Callback Validation: Ensures that payment callbacks are processed correctly and securely, preventing replay attacks.
- Order Normalization: Guarantees consistent order matching between the system and payment gateway.
- Configuration Audit: Checks for secure and correct gateway configuration in production environments.
- Use Case: Before merging any code changes related to the payment module, run this skill to automatically audit the security of the payment flow, ensuring no vulnerabilities are introduced.
Quick Start
Run the payment-review skill to audit the security of the payment flow for Paybox and SystemPay.