Pci Compliance

If you're building anything that touches credit card data, this walks you through the 12 core PCI DSS requirements and shows you how to actually implement them. The code examples cover tokenization patterns with Stripe, encryption for data at rest using AES-256-GCM, and what you absolutely cannot store (CVV, PIN, full track data). It's organized around compliance levels based on transaction volume, so you know whether you need a full ROC or just an SAQ. The access control and sanitization examples are practical starting points, though you'll still need a QSA for real certification. Good reference when scoping your cardholder data environment or explaining to your team why they can't just log everything.

skills.sh installs: 203
GitHub stars: 39.4K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill pci-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

Payment Data and PCI Evidence Review

When to Use

Review payment data flows, prepare engineering controls or collect evidence for a scoped PCI assessment. This skill does not certify compliance or determine assessment eligibility on its own.

Inputs and prerequisites

Identify the merchant/service-provider role, acquiring institution, processor integration, systems handling account data and the applicable assessment documents. Obtain the current documents from the PCI SSC document library; confirm applicability with the responsible assessor or acquiring institution.