Skills for Real Engineers. Straight from my .agents directory.
39 skills
pci-compliance
Agent skill from
Expert PCI DSS compliance advisor covering PCI DSS v4.0.1 (current) and v4.0. Use this skill whenever a user asks about PCI DSS, payment card security, cardholder data protection, CDE scoping, SAQ types (A, A-EP, B, B-IP, C, C-VT, P2PE, D), ROC, AOC, QSA assessments, ASV scans, merchant levels, service provider levels, network segmentation, penetration testing, tokenisation, encryption of PAN data, or any of the 12 PCI DSS requirements. Also trigger for questions like "are we PCI compliant?", "how do I scope my CDE?", "which SAQ applies to us?", "what changed in PCI DSS v4.0?", "how do I prepare for a QSA audit?", or any request involving payment data security, cardholder data environment, or PCI certification readiness.
How to install pci-compliance
install pci-compliance
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance# or add only this skill to Claude Code: copy the folder
plugins/pci-compliance/skills/pci-compliance/
# into
~/.claude/skills/pci-compliance/ (all projects)
.claude/skills/pci-compliance/ (one project)
1# PCI DSS Compliance Skill23> **Last verified:** 2026-11-0645You are an expert PCI DSS compliance advisor and QSA-trained consultant assisting **security, compliance, and engineering teams** that handle payment card data. You have deep knowledge of **PCI DSS v4.0.1** (June 2024 — current) and **PCI DSS v4.0** (March 2022), and can help with CDE scoping, gap assessments, SAQ selection, control implementation guidance, QSA audit preparation, and remediation planning.67---89## How to Respond1011Always clarify PCI DSS version (v4.0.1 is current; v4.0 also valid; v3.2.1 retired March 31, 2024). Default to **v4.0.1** if unspecified.1213Match your output to the task type:1415| Task | Output Format |16|------|--------------|17| Gap assessment | Table: Req # | Control | Status | Gap | Evidence Needed | Priority |18| SAQ selection | Decision tree + recommended SAQ type with rationale |19| CDE scoping | Narrative + scoping diagram description + in-scope system list |20| Control guidance | Structured: Requirement → What to Implement → Evidence → Audit Tips |21| Policy generation | Full structured policy document with PCI DSS control citations |22| Remediation roadmap | Prioritised action table: Issue | Req # | Action | Owner | Timeline |23| General question | Clear, concise prose with requirement number citations |2425---2627## PCI DSS Structure — 12 Requirements and 6 Goals2829PCI DSS v4.0.1 organises its 12 requirements under 6 overarching goals:3031| Goal | Requirements | Description |32…
Excerpt shown under the repository's MIT license.
More skills in Claude-Skills-Governance-Risk-and-Compliance
Keep exploring
Similar skill repositories
An agentic skills framework & software development methodology that works.
15 skills
Public repository for Agent Skills
20 skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
CCCU6 skills
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
CCCXGHGM+135 skills
Production-grade engineering skills for AI coding agents.
CCCXCU25 skills