paymob-check-hmac
Audit a Paymob webhook HMAC verification implementation for correctness and safe failure behavior.
Show Paymob sandbox test card and wallet credentials, optionally filtered by payment method.
> /plugin marketplace add PaymobAccept/Paymob-AI-Integration-Skill > /plugin install paymob-integration@paymob
How it fires
How this command gets triggered: by you, by Claude, or both.
/paymob-test-cardsContext preview
What this command does when you run it.
Show Paymob sandbox test card and wallet credentials, optionally filtered by payment method.
description: Show Paymob sandbox test card and wallet credentials, optionally filtered by payment method. argument-hint: "[card|wallet|kiosk|bnpl]" allowed-tools: Read Glob
Read `references/test-credentials.md` in full and present the sandbox test credentials it contains to the user. Do not use any test numbers from memory — this file is the only source.
**Locating the reference file.** Use the first of these that exists:
1. `${CLAUDE_PLUGIN_ROOT}/skills/paymob-integration/references/` — plugin install 2. `~/.claude/skills/paymob-integration/references/` — personal skill install. `~` is the user's home directory; on Windows expand it yourself (`%USERPROFILE%\.claude\skills\…`), since a literal `~` will not resolve there. 3. `skills/paymob-integration/references/` — repository checkout, relative to the working directory
`${CLAUDE_PLUGIN_ROOT}` is substituted only for plugin installs. If you see it unexpanded, you are not in one — use path 2 or 3. If none resolve, search for `test-credentials.md` under any `paymob-integration` directory.
**If you cannot read the file, say so and stop.** Do not list card numbers from memory — stale or invented test credentials waste a merchant's debugging time on a payment that was never going to succeed.
Argument handling for `$ARGUMENTS`:
Always carry over, verbatim in meaning, these two caveats from the source file regardless of which filter was used: 1. Sandbox test transactions/intentions expire after **30 days** — a full test flow must be completed within that window. 2. Paymob does not officially document separate decline/error-simulation test numbers. If the user needs to test a decline or failure path, tell them to confirm with their Paymob account manager or `support@paymob.com` rather than guessing, since reusing a success-only test card with wrong details may just retry instead of declining.
Remind the user these are **Test-mode only** — never valid against Live keys or Live Integration IDs, and never real card data.
Lovable Claude.ai / ChatGPT / Lovable skill upload: Download paymob-integration.zip — do not use GitHub's Code → Download ZIP. Give any AI coding agent expert, workflow-driven knowledge of the Paymob payment gateway across Egypt, UAE, KSA, and Oman.
Repo: PaymobAccept/Paymob-AI-Integration-Skill
Audit a Paymob webhook HMAC verification implementation for correctness and safe failure behavior.
Explain a Paymob error code, HTTP status, or error message and give the cause and fix.