Malaysia Payment Gateway
Idempotentní, HMAC-ově ověřené checkout/webhook toky pro CHIP, Curlec, Xendit MY, Billplz, toyyibPay.
Otestováno · Funguje
Co umí
Vede implementaci Malaysia-specific payment gateway integrations (CHIP Collect, Curlec/Razorpay, Xendit Malaysia, Bayarcash, BCL Pay, toyyibPay, Billplz, FPX, DuitNow QR) as a local-payment-intent-first state machine. Spouští se na checkout, webhook/callback verification, HMAC signature checks, idempotent settlement, refunds, reconciliation, and sandbox/live provider switching.
Testovací report
Its security-settlement.md ships a 9-question 'loophole review' (can a duplicate webhook double-fulfill? can amount/currency be forged?) that a baseline schema design misses entirely, plus a dedicated gateway_event dedupe table baseline solutions skip.
Testováno: 2026-07-14 · Claude Code 2.x (agent harness)
Instalace
git clone https://github.com/afu-it/malaysia-payment-gateway cd malaysia-payment-gateway mkdir -p ~/.claude/skills cp -r malaysia-payment-gateway ~/.claude/skills/malaysia-payment-gateway
Příkazy a ukázkové prompty
/malaysia-payment-gatewayIdempotentní, HMAC-ově ověřené checkout/webhook toky pro CHIP, Curlec, Xendit MY, Billplz, toyyibPay.
Skilly se spouštějí běžnými požadavky — žádné příkazy k zapamatování. Po instalaci ho aktivují prompty jako tyto (anglicky):
Help me integrate Billplz checkout with proper webhook signature verificationI need idempotent settlement handling for our Curlec payment webhooksSet up FPX and DuitNow QR payments with HMAC-verified callbacks