pci-dss-compliance
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is strictly educational and provides secure coding practices for PCI DSS compliance. All code examples use industry-standard libraries (Stripe SDK, requests, standard Python/JS libraries).
- [SAFE]: External URLs point to official, well-known services (Stripe, OWASP, PCI SSC). No suspicious or obfuscated remote downloads are present.
- [SAFE]: Command execution examples (nmap, docker/zap) are standard security testing tools used for compliance validation as described in the text.
- [SAFE]: Credential management is handled correctly by advising users to use environment variables or tokens, and warning against hardcoding secrets (e.g., using placeholders like 'pk_live_...').
Audit Metadata