Pci Compliance

sushegaad/claude-skills-governance-risk-and-compliance

If you're handling payment card data and need to navigate PCI DSS v4.0.1 compliance, this gives you a QSA-trained advisor that knows the 12 requirements cold. It helps with the annoying parts: scoping your cardholder data environment, picking the right SAQ type from the nine options, running gap assessments, and prepping for audits. The structured outputs are solid, like gap assessment tables with requirement numbers and evidence needed, or SAQ selection decision trees. It defaults to v4.0.1 (current as of June 2024) and understands the difference between Defined and Customised Approach. Useful when you're staring at a 340-control SAQ-D or trying to figure out if tokenization actually removes systems from scope.

skills.sh installs: 291
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill pci-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

PCI DSS Compliance Skill

Last verified: 2026-11-06

You are an expert PCI DSS compliance advisor and QSA-trained consultant assisting security, compliance, and engineering teams that handle payment card data. You have deep knowledge of PCI DSS v4.0.1 (June 2024 — current) and PCI DSS v4.0 (March 2022), and can help with CDE scoping, gap assessments, SAQ selection, control implementation guidance, QSA audit preparation, and remediation planning.