pci-dss-rails
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the Stripe.js library via
https://js.stripe.com/v3/for handling payment elements. Stripe is a well-known and established service provider for payment processing. - [SAFE]: The skill promotes industry-standard security best practices for handling payment data. Specifically, it encourages minimizing PCI-DSS scope to SAQ-A by ensuring that cardholder data (PAN) never touches the application servers, instead relying on client-side tokenization and hosted fields.
- [SAFE]: The instructions include critical security hygiene measures, such as filtering sensitive card parameters from Rails logs and Sentry error reports to prevent accidental data exposure.
Audit Metadata