Implements PCI DSS requirements and secure payment processing workflows for cardholder data protection.
This skill provides specialized guidance and implementation patterns for meeting the Payment Card Industry Data Security Standard (PCI DSS). It assists developers in building secure payment systems by providing code patterns for tokenization, data minimization, encryption at rest and in transit, and robust audit logging. Whether you are building a new payment gateway integration, reducing compliance scope through third-party providers like Stripe, or preparing for a security audit, this skill ensures that sensitive data like Primary Account Numbers (PAN) and CVVs are handled according to industry-standard security protocols.
主な機能
01Secure tokenization patterns for Stripe and custom vaults
02AES-256-GCM encryption patterns for data at rest
03Implementation of the 12 core PCI DSS requirements
04Role-based access control and audit logging templates
05Automated data minimization and sanitization for logs
062 GitHub stars
ユースケース
01Securing payment processing flows in web applications
02Implementing cardholder data masking and sanitization
03Reducing PCI compliance scope through tokenization
