payment-pci-security
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and correct security guidelines for handling PCI-sensitive data, specifically enforcing the use of Secure Proxy in non-PCI environments to prevent exposure of raw card data.
- [SAFE]: The instruction provides clear "Wrong vs Correct" code examples that explicitly prohibit the storage and logging of sensitive card fields like PAN, CVV, and cardholder names.
- [SAFE]: The code patterns use environment variables for sensitive credentials and demonstrate proper redaction techniques for logging, following security best practices.
- [SAFE]: The skill correctly delineates security boundaries, such as preventing headless storefront BFFs from handling card data and distinguishing between sensitive authorization flows and non-sensitive post-authorization operations.
Audit Metadata