# Secure Payment Review

> Review Meridian checkout changes for payment-safety and reliability risks. Use when reviewing payment, refund, retry, or transaction-handling code.

- Skill: `webmaxru/secure-payment-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add webmaxru/secure-payment-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/webmaxru/secure-payment-review/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- License: MIT
- Author: webmaxru (https://skillmd.com/u/webmaxru)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/webmaxru/secure-payment-review

---


# Secure Payment Review

Review only the changed payment flow and report concrete findings with file and line references.

## Required checks

1. Represent money with Meridian's `Money` value object; never use floating-point currency math.
2. Make checkout, capture, and refund retries idempotent by `paymentAttemptId`.
3. Never log card data, authorization headers, access tokens, or raw payment-provider payloads.
4. Validate state transitions before capture or refund operations.
5. Treat timeouts as an unknown outcome until the provider confirms the transaction state.

## Output

Return findings ordered by severity. For every finding, state the failure mode, the affected code,
and the smallest safe correction. Say `No payment-safety findings` when all required checks pass.