pci-dss-compliance
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions primarily as a documentation and planning resource for PCI DSS compliance. It provides structural guidance and checklists without executing hidden or dangerous code.
- [COMMAND_EXECUTION]: The skill includes shell command examples for infrastructure configuration, such as AWS CLI commands for managing security groups (
aws ec2 create-security-group,aws ec2 authorize-security-group-ingress). These are standard DevOps operations aligned with the skill's stated purpose of implementing network segmentation controls. - [DATA_EXPOSURE]: The skill incorporates explicit safety instructions regarding sensitive data, warning the user to never copy real Primary Account Numbers (PAN), CVV, or cryptographic keys into prompts or logs, and recommending synthetic test data instead.
- [EXTERNAL_DOWNLOADS]: The skill references established security scanning tools (e.g., Qualys, Nessus, OpenVAS) and standard package managers (
yum,apt) for maintenance. It does not contain any remote code execution patterns or unverified third-party downloads.
Audit Metadata