Payment teams need consistent designs for transactions, channels, reconciliation, security, and failure handling. This skill provides structured guidance, examples, and review checklists.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "payment-engineer" from https://skillstore.io/skills/zl2023github-payment-engineer.md and its manifest at https://skillstore.io/api/skills/zl2023github-payment-engineer/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.
Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
All 20 static findings are false positives caused by Markdown fences, inline code formatting, or multilingual text. The skill is a documentation-only payment engineering guide with no executable commands, system reconnaissance, obfuscation, or prompt injection.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
zl2023github. (2026). payment-engineer security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zl2023github-payment-engineer/audits/4
BibTeX citation
@techreport{zl2023github-zl2023github-payment-engineer-2026,
author = {zl2023github},
title = {payment-engineer security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/zl2023github-payment-engineer/audits/4},
note = {Author version unspecified}
}
CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "payment-engineer security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "zl2023github"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/zl2023github-payment-engineer/audits/4"
identifiers:
- type: other
value: "skillstore:zl2023github-payment-engineer:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this scoreEvidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance
What You Can Build
Plan a payment platform
Create an architecture outline covering transaction intake, accounting, settlement, channel routing, availability, and consistency.
Review payment reliability
Check idempotency, state transitions, callbacks, distributed transactions, and fallback behavior before implementation.
Investigate transaction differences
Build a focused checklist for missing payments, duplicate charges, or reconciliation mismatches.
Try These Prompts
Outline a payment flow
Outline a payment flow for [payment method]. Include request validation, idempotency, channel submission, callbacks, state transitions, and customer responses.
Design a channel adapter
Design a channel adapter for [provider] using [language]. Cover payment, query, refund, callback verification, error mapping, and retry boundaries.
Plan reconciliation
Create a reconciliation plan for [business]. Define matching keys, time windows, fees, refunds, currencies, exception categories, and operational resolution steps.
Review production resilience
Review this payment architecture: [architecture details]. Identify consistency, security, capacity, observability, recovery, and compliance gaps. Prioritize recommendations by financial impact.
Best Practices
Provide business volume, payment methods, currencies, regions, and consistency requirements.
Validate generated designs against current provider contracts, compliance obligations, and internal security standards.
Test idempotency, callback retries, partial failures, reconciliation exceptions, and recovery procedures before release.
Avoid
Do not use illustrative code directly in production without validation, error handling, tests, and security review.
Do not treat distributed locks as the only protection against duplicate financial operations.
Do not log credentials, signatures, full card data, or unmasked personal information.
Frequently Asked Questions
Does this skill process real payments?
No. It provides architecture, implementation, review, and troubleshooting guidance without connecting to providers.
Which programming languages does it cover?
The guidance targets Java, Go, and Python systems, with small Java and Python examples.
Which payment providers are discussed?
It references WeChat Pay, Alipay, UnionPay, Stripe, Adyen, and PayPal as common channel examples.
Can it help with reconciliation?
Yes. It covers bill retrieval, parsing, transaction matching, difference analysis, exception handling, and reporting.
Does it guarantee PCI-DSS compliance?
No. It highlights important controls, but qualified compliance and security professionals must assess the production system.
What information improves the result?
Provide payment methods, providers, transaction volume, currencies, deployment model, failure scenarios, and regulatory constraints.