pci-compliance
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely educational and instructional, providing best practices for handling sensitive payment data without including any executable or malicious code.
- [DATA_EXPOSURE]: While the skill discusses handling Primary Account Numbers (PAN) and other cardholder data, the provided code snippets demonstrate secure handling techniques, such as masking PANs in logs and using tokenization to avoid storing sensitive data on local servers. Placeholders like
sk_...andpk_...are used for API keys, which is standard practice for documentation. - [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts or unverified dependencies.
- [COMMAND_EXECUTION]: No shell commands or subprocess calls were found in the skill content.
- [PROMPT_INJECTION]: No instructions attempting to override agent behavior or bypass safety filters were detected.
Audit Metadata