Malaysia Payment Gateway Skills
63 skills for Malaysian payment gateways: server-side checkout, webhook signature checks and idempotent settlement
- 76 ★ on the repository
- Last commit
Extended access
Why this level
- The skills write payment-handling code, and a bug there affects customer money
- The agent asks for gateway account data, and keys must not be pasted into chat
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/malaysia-payment-gateway-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The skills write payment-handling code, and a bug there affects customer money
- The agent asks for gateway account data, and keys must not be pasted into chat
This is third-party code. Review the repository files before installing.
What it does
The repository contains a shared `malaysia-payment-gateway` skill and one `setup-<gateway>` skill per gateway: CHIP, Curlec, Xendit, Bayarcash, toyyibPay, Billplz, Fiuu, senangPay, HitPay, Stripe Malaysia, 2C2P, Adyen, PayPal and others, 63 in total. The shared skill walks the agent through the order: find the app order tables and session, create a local payment intent, then a gateway session, and confirm settlement on the server. Gateway skills describe concrete methods: creating a bill or payment session, callbacks, HMAC or other signature verification, refunds, payouts and recurring payments. The `references/` folders hold references for the API, response codes, account setup and webhooks, plus a source map. Each skill links to the gateway fee page on the Malaysia Payment Gateway site, which compares the pricing of 81 gateways. Installation is `npx skills@latest add afu-it/malaysia-payment-gateway`, with optional `--skill` and `--all` flags.
Who it is for. Developers of shops and services in Malaysia who connect FPX, DuitNow QR, cards and e-wallets.
Good fit when
- The app needs a payment through Billplz or toyyibPay and the agent has to account for callback signatures
- You are choosing a gateway and need a checklist: fees, refunds, sandbox, live mode
- A payment succeeds but the customer does not get access, and you need to review the settlement logic
- You must review someone else's integration for idempotency and webhook protection
Not a fit when
- Your gateway is not listed: there is no skill for it and the shared skill gives only a plan and checks
- You need a payment integration outside Malaysia: every skill is tuned to local payment methods
- You want a ready CMS plugin: the skills write application code and do not install shop plugins
Example request
Connect Billplz payments to my Laravel app: create the payment, verify the callback signature and unlock access after confirmationLimitations
Gateway API versions change and the references in `references/` were compiled by the author from documentation as of the commit date, so confirm methods against the current gateway docs. The skills do not receive gateway keys and do not make payments themselves: they write and review code that later runs with your keys. Test payments are made by hand in the gateway sandbox. The repository states no license, so ask the author about terms before using it in a project. Gateways with certificates or contracts need an active merchant account.
How to disable. Delete the skill folders from `.agents/skills/` or `.claude/skills/` in the project, or reinstall the set with a chosen list using `npx skills@latest add afu-it/malaysia-payment-gateway --skill <name>`.
FAQ
Which gateways does the set cover?
Sixty-three skills, including CHIP, Curlec, Xendit, Bayarcash, BCL, toyyibPay, Billplz, Fiuu, senangPay, HitPay, Stripe Malaysia, 2C2P, Adyen, PayPal, Qashier and Setel. The full list is in the README table.
Can I install a single skill?
Yes, `--skill` takes a name such as `setup-curlec`. `--list` shows what is available, `--all` installs everything and `-g` makes the install global.
What does the shared skill check before finishing?
The file `references/security-settlement.md`: the webhook signature, redelivery, matching amount and currency, and the order in which the payment is settled on the server.
Where can I compare gateway fees?
The Malaysia Payment Gateway site compares the pricing of 81 gateways from their official pages. It has a free JSON API and an MCP server, and each skill links to its gateway page.
Does the set work in Claude Code?
The skills are SKILL.md files and the `npx skills` installer places them in the folders of Claude Code, Codex, Cursor and other agents. The `agents/openai.yaml` file beside a skill is for Codex.
Discussion
No questions or reviews yet.
Related
SkillsThe official ECPay skill teaches an agent to integrate payments, logistics and e-invoicing from the Taiwanese service.
Hundreds of per-provider skills teach an agent to receive webhooks, verify signatures and handle events, with code examples.
YooKassa Skill
Yookassa Skill
A reference skill for YooKassa integration: API v3, a TypeScript SDK, one and two-stage payments, webhooks and 54-FZ
The official Payload CMS skill shipped inside the package: collections, fields, hooks, access control, queries and database adapters
Official Clerk skills that teach an agent to add authentication to Next.js, React, Vue, Expo, Swift and Android apps
Five Saleor skills for an agent: apps, storefronts, store configuration as code and backend internals
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| Malaysia Payment Gateway Skills (this card) | no | 76 | ||
| E2B Stripe Projects skill | no | 14,834 | Stripe projects in E2B, does not cover Malaysian gateways | |
| Stripe AI | yes | OAuth | 2,059 | official Stripe tools for AI |
README in short
The README lists the skills in a table: name, use and a link to the gateway fees. Installation order follows, with a check of the current version, the list of `npx skills` flags and a link to the gateway comparison site.
README badge
Original SKILL.md
--- name: malaysia-payment-gateway description: Build, debug, review, and explain Malaysia payment gateway integrations. Use when implementing checkout, payment links, hosted payment pages, redirects, callbacks, webhooks, HMAC/signature verification, idempotent settlement, paid-access unlocking, refunds, reconciliation, sandbox/live setup, or provider switching for Malaysian gateways such as CHIP Collect, Curlec/Razorpay, Xendit Malaysia, Bayarcash, BCL Pay, toyyibPay, Billplz, FPX, DuitNow QR, cards, or e-wallets. --- # Malaysia Payment Gateway Use this skill to add production-grade payment collection to an app, not only to make a checkout button. Treat payment as a state machine: local intent first, gateway session second, verified server-side settlement last. ## Quick Start 1. Identify provider, product, currency, amount unit, and environment. 2. Read [references/integration-checklist.md](references/integration-checklist.md). 3. If provider-specific guidance is needed, read [references/provider-patterns.md](references/provider-patterns.md). 4. Before marking complete, check [references/security-settlement.md](references/security-settlement.md). ## Implementation Workflow ### 1. Map Existing App Find: - Auth/session helper. - Database access layer. - Existing order, invoice, subscription, entitlement, or payment tables. - Server route pattern. - Environment/secret handling. - Test style and deployment target. Do not start with provider API calls before local payment records and settlement rules are clear. ### 2. Create Local Payment Intent Create or reuse a `payments` table with at least: - `id` - `user_id` or customer id - `product` or order id - `amount_original` - `discount_amount` - `amount_paid` - `currency` - `provider` - `status` - `gateway_ref`