The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing external payment callbacks (IPNs). It explicitly mitigates the risk of forged or injected data by mandating a server-to-server verification step via the PaymentGW/GetTransaction API and requiring byte-for-byte matching of confirmation keys.
Ingestion points: ServerSideGoodFeedbackURL (IPN callback) defined in SKILL.md.
Boundary markers: The skill instructs the implementation of a verification boundary using the ConfirmationKey and a mandatory API lookup.
Capability inventory: The integration enables network operations (API calls) and database writes (marking orders as paid).
Sanitization: Instructs strict validation of transaction status, amount, and ID against the authoritative Pelecard server response.
[EXTERNAL_DOWNLOADS]: The skill references official and community-maintained resources from well-known domains such as github.com (dofinity/pelecard), wordpress.org (Pelecard plugin), and postman.com. These references are used for integration guidance and do not involve untrusted remote code execution.
[COMMAND_EXECUTION]: Includes a utility script scripts/validate_pelecard_response.py for local validation of callback payloads. The script uses standard JSON parsing and does not perform network operations or dangerous system calls.

pelecard-payment-gateway