pci-compliance

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely educational and instructional, providing best practices for handling sensitive payment data without including any executable or malicious code.
  • [DATA_EXPOSURE]: While the skill discusses handling Primary Account Numbers (PAN) and other cardholder data, the provided code snippets demonstrate secure handling techniques, such as masking PANs in logs and using tokenization to avoid storing sensitive data on local servers. Placeholders like sk_... and pk_... are used for API keys, which is standard practice for documentation.
  • [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts or unverified dependencies.
  • [COMMAND_EXECUTION]: No shell commands or subprocess calls were found in the skill content.
  • [PROMPT_INJECTION]: No instructions attempting to override agent behavior or bypass safety filters were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 09:36 AM
Security Audit — agent-trust-hub — pci-compliance