The Agent Skills Directory

[SAFE]: The provided Python code examples demonstrate secure coding practices for handling sensitive payment data. Specifically, it implements the Luhn algorithm for card validation, emphasizes tokenization to avoid storing Primary Account Numbers (PAN), and correctly identifies that Sensitive Authentication Data (SAD) like CVV must never be stored.
[SAFE]: Data encryption patterns utilize the standard and well-known cryptography library for AES-256 encryption of cardholder data at rest.
[SAFE]: Secure transmission configurations mandate the use of TLS 1.2 or higher and strong cipher suites, aligning with modern security standards and PCI DSS requirements.
[SAFE]: Access control and auditing patterns follow the principle of least privilege and Requirement 10 of the PCI DSS standard for tracking and monitoring access to the Cardholder Data Environment (CDE).
[SAFE]: All external references target official security organizations, such as the PCI Security Standards Council (pcisecuritystandards.org), and well-known developer resources like OWASP.

pci-dss-compliance