afu-it/malaysia-payment-gateway

This repository is a collection of AI agent skills for developers who need to add payment processing to applications built for the Malaysian market. A skill in this context is a pre-built set of instructions and knowledge that an AI coding agent can load to give itself accurate context about a specific payment gateway before writing integration code. The six included skills cover the most common Malaysian payment providers: CHIP Collect, Curlec (which connects to Razorpay), Xendit, Bayarcash, BCL Pay, and a general gateway-agnostic overview skill. Each skill teaches the agent how to handle the full payment flow: creating checkout sessions, verifying webhook or callback signatures, and settling payments without processing the same event twice. The README walks through the recommended workflow: install the overview skill first, then install the skill for whichever payment provider you are using. You then ask the agent to review your existing code before writing anything new. Example prompts are provided showing how to phrase requests, such as asking the agent to implement Curlec checkout, callback verification, webhook settlement, and tests in a Next.js project. A dedicated production checklist covers the things that are easy to miss, including separating live from sandbox credentials, making sure duplicate webhook replays are harmless, and confirming that a fake success redirect cannot grant paid access. The repository also includes clear instructions for contributors who want to add support for additional Malaysian payment gateways, including a folder structure, a SKILL.md template, and a validation script. The project is aimed at developers in Malaysia who want to get payment integrations right and avoid common security mistakes.