Claude MarketplacesSubmit
wshobson avatar

Pci Compliance

wshobson/agents

When you need to handle credit card data without getting buried in PCI DSS compliance hell, this skill walks you through the 12 core requirements with practical Python implementations. It shows you how to properly tokenize payments using Stripe, encrypt cardholder data at rest with AES-256-GCM, and implement access controls that auditors actually want to see. The code examples cover everything from data sanitization for logs to building a secure token vault. Most importantly, it hammers home what you should never store (CVV, PIN, track data) and gives you working patterns for the stuff you can store safely.

skills.sh installs
10.9K
GitHub stars
42.4K
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add wshobson/agents --skill pci-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

PCI Compliance

Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processing and handling of cardholder data.

When to Use This Skill

  • Building payment processing systems
  • Handling credit card information
  • Implementing secure payment flows
  • Conducting PCI compliance audits
  • Reducing PCI compliance scope
  • Implementing tokenization and encryption
  • Preparing for PCI DSS assessments

PCI DSS Requirements (12 Core Requirements)

Build and Maintain Secure Network

  1. Install and maintain firewall configuration
  2. Don't use vendor-supplied defaults for passwords

Protect Cardholder Data

  1. Protect stored cardholder data
  2. Encrypt transmission of cardholder data across public networks

Maintain Vulnerability Management

  1. Protect systems against malware
  2. Develop and maintain secure systems and applications

Implement Strong Access Control

  1. Restrict access to cardholder data by business need-to-know
  2. Identify and authenticate access to system components
  3. Restrict physical access to cardholder data

Monitor and Test Networks

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/wshobson/agents
Categories
Security, Finance & Trading

More from wshobson/agents

All 174

Recommended

More Security
1aws avataraws-iamaws/agent-toolkit-for-awsVerified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits, Organizatio10.9Kskills.sh installs
2ljagiello avatarctf-reverseljagiello/ctf-skillsProvides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target wor10.9Kskills.sh installs
3aws avataraws-observabilityaws/agent-toolkit-for-awsBuilds, configures, debugs, and optimizes AWS observability with CloudWatch (Log Insights, Metrics, Alarms, Dashboards, EMF), X-Ray, CloudTrail, and ADOT (AWS D10.7Kskills.sh installs
4wshobson avatarlinkerd-patternswshobson/agentsImplement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, o10.6Kskills.sh installs
5deeflect avatarmiesdeeflect/miesUse this skill when creating, redesigning, critiquing, reducing, polishing, hardening, or making design decisions for a user-facing interface, brand surface, pr10.5Kskills.sh installs
6trailofbits avatarsemgreptrailofbits/skillsRun Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full ruleset coverage) and "important only" (high-10.3Kskills.sh installs