Files
agents/plugins/payment-processing
Kiri 493e2ea399 docs: enhance payment-integration agent with critical security guidance (#121)
Add evidence-based security requirements from Stripe, PayPal, OWASP:
- Webhook security (signature verification, idempotency, quick response, server validation)
- PCI compliance essentials (tokenization, server-side validation, environment separation)
- Real-world failure examples (processor collapse, Lambda failures, malicious price manipulation)

Minimal expansion: 32 to 57 lines (25 lines added)

Co-authored-by: Kiran Eshwarappa <kiran.eshwarapa@gmail.com>
2025-11-16 20:45:22 -05:00
..