PCI Compliance & Secure Proxy

When this skill applies

Use this skill when:

• Building a payment connector that accepts credit cards, debit cards, or co-branded cards
• The connector needs to process card data or communicate with an acquirer
• Determining whether Secure Proxy is required for the hosting environment
• Auditing a connector for PCI DSS compliance (data storage, logging, transmission)

Do not use this skill for:

• PPP endpoint contracts and response shapes — use payment-provider-protocol
• Idempotency and duplicate prevention — use payment-idempotency
• Async payment flows (Boleto, Pix) and callbacks — use payment-async-flow

Decision rules