Skills payment-engineer
📦

payment-engineer

Content revision r2 Safe ⚙️ External commands

Design Reliable Payment Systems

Payment teams need consistent designs for transactions, channels, reconciliation, security, and failure handling. This skill provides structured guidance, examples, and review checklists.

Supports: Claude Codex Code(CC)
🥉 77 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "payment-engineer" from https://skillstore.io/skills/zl2023github-payment-engineer.md and its manifest at https://skillstore.io/api/skills/zl2023github-payment-engineer/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "payment-engineer". Design the state flow for card payments with asynchronous callbacks.

Expected outcome:

  • Start in Pending, then move to Processing after validated channel submission.
  • Accept verified callbacks for Success or Failed transitions.
  • Use a separate Refunding transition before Refunded.
  • Reject repeated transitions through an idempotency key and state validation.

Using "payment-engineer". Create a checklist for a customer charged while the order remains unpaid.

Expected outcome:

  • Confirm the provider transaction and callback delivery status.
  • Verify callback signature validation and idempotency records.
  • Inspect callback retries and transaction state transitions.
  • Reconcile the provider record before any manual correction.

Using "payment-engineer". Summarize minimum controls for storing payment data.

Expected outcome:

Do not store card verification values or plaintext card data. Encrypt permitted data, protect keys with an HSM, use TLS, and mask logs.

Security Audit

Safe
v4 • 7/23/2026 Open versioned report

All 20 static findings are false positives caused by Markdown fences, inline code formatting, or multilingual text. The skill is a documentation-only payment engineering guide with no executable commands, system reconnaissance, obfuscation, or prompt injection.

1
Files scanned
232
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/zl2023github-payment-engineer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zl2023github-payment-engineer/security.svg)](https://skillstore.io/skills/zl2023github-payment-engineer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zl2023github-payment-engineer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zl2023github-payment-engineer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zl2023github-payment-engineer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

zl2023github. (2026). payment-engineer security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zl2023github-payment-engineer/audits/4

BibTeX citation

@techreport{zl2023github-zl2023github-payment-engineer-2026, author = {zl2023github}, title = {payment-engineer security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/zl2023github-payment-engineer/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "payment-engineer security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "zl2023github" date-released: "2026-07-23" url: "https://skillstore.io/skills/zl2023github-payment-engineer/audits/4" identifiers: - type: other value: "skillstore:zl2023github-payment-engineer:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Plan a payment platform

Create an architecture outline covering transaction intake, accounting, settlement, channel routing, availability, and consistency.

Review payment reliability

Check idempotency, state transitions, callbacks, distributed transactions, and fallback behavior before implementation.

Investigate transaction differences

Build a focused checklist for missing payments, duplicate charges, or reconciliation mismatches.

Try These Prompts

Outline a payment flow
Outline a payment flow for [payment method]. Include request validation, idempotency, channel submission, callbacks, state transitions, and customer responses.
Design a channel adapter
Design a channel adapter for [provider] using [language]. Cover payment, query, refund, callback verification, error mapping, and retry boundaries.
Plan reconciliation
Create a reconciliation plan for [business]. Define matching keys, time windows, fees, refunds, currencies, exception categories, and operational resolution steps.
Review production resilience
Review this payment architecture: [architecture details]. Identify consistency, security, capacity, observability, recovery, and compliance gaps. Prioritize recommendations by financial impact.

Best Practices

  • Provide business volume, payment methods, currencies, regions, and consistency requirements.
  • Validate generated designs against current provider contracts, compliance obligations, and internal security standards.
  • Test idempotency, callback retries, partial failures, reconciliation exceptions, and recovery procedures before release.

Avoid

  • Do not use illustrative code directly in production without validation, error handling, tests, and security review.
  • Do not treat distributed locks as the only protection against duplicate financial operations.
  • Do not log credentials, signatures, full card data, or unmasked personal information.

Frequently Asked Questions

Does this skill process real payments?
No. It provides architecture, implementation, review, and troubleshooting guidance without connecting to providers.
Which programming languages does it cover?
The guidance targets Java, Go, and Python systems, with small Java and Python examples.
Which payment providers are discussed?
It references WeChat Pay, Alipay, UnionPay, Stripe, Adyen, and PayPal as common channel examples.
Can it help with reconciliation?
Yes. It covers bill retrieval, parsing, transaction matching, difference analysis, exception handling, and reporting.
Does it guarantee PCI-DSS compliance?
No. It highlights important controls, but qualified compliance and security professionals must assess the production system.
What information improves the result?
Provide payment methods, providers, transaction volume, currencies, deployment model, failure scenarios, and regulatory constraints.

Developer Details

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

88a8e9a07f4c54ab105c1c41b6267c287146b07b

Maintenance freshness

7/26/2026

Usage

2 downloads · 2 views

File structure

📄 SKILL.md

More from zl2023github

View all
View all