The Agent Skills Directory

[SAFE]: The skill mandates secure payment processing by instructing the use of hosted payment fields and client-side tokenization (e.g., Stripe Elements, Adyen Drop-in). This ensures the implementation meets PCI DSS SAQ-A requirements by preventing sensitive card data from being processed or stored on merchant-controlled servers.
[SAFE]: It emphasizes secure secret management by directing the agent to store API keys in 'Named Credentials' or 'Custom Settings' rather than in the source code, preventing credential exposure.
[SAFE]: The skill utilizes external data ingestion to ensure implementation accuracy:
- Ingestion points: WebSearch and WebFetch tools are used in SKILL.md to retrieve documentation for Salesforce Payments, Stripe, and Adyen.
- Boundary markers: Not present; the agent is expected to parse the resulting documentation directly.
- Capability inventory: The skill utilizes Bash, Write, and Edit tools to assist in code implementation.
- Sanitization: No explicit sanitization of the fetched content is specified.
- This interaction pattern is typical for a development assistant fetching documentation from well-known and trusted technology services and does not indicate malicious intent.

sf-payments