pci-compliance
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality security guidance for PCI DSS compliance, emphasizing the protection of cardholder data.
- [SAFE]: Python code snippets utilize industry-standard, well-known libraries such as
cryptographyfor AES-256-GCM encryption andstripefor tokenization, following secure implementation patterns. - [SAFE]: Sensitive configuration, such as API keys, is correctly handled through environment variables (e.g.,
os.environ["STRIPE_SECRET_KEY"]) rather than being hardcoded. - [SAFE]: The skill includes robust data minimization and sanitization logic, such as masking Primary Account Numbers (PAN) and explicitly prohibiting the storage of CVV and PIN data.
- [SAFE]: Access control is implemented using standard Flask decorators to enforce role-based access to sensitive payment endpoints.
Audit Metadata