PCI DSS v4.0.1 compliance expert. Provides guidance on payment card industry security, ROC completion, SAQ selection, requirement interpretation, and the new March 2025 mandatory requirements.
NewMaintained
Automatic
◆FinServ Compliance pack
Last verified 8/23/2026
What it changes
Passed 0 of 22 test cases with the skill, and 22 of 22 without it.
Without skill100%
With skill0%
0 fixed20 passed either way1 still failing1 broke
Pass-rate lift
-100 pp
Tokens
+48%
Agent turns
0%
Response time
+8%
Model gemini-3.6-flashMeasured 8/23/2026v120 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
What's inside
The instructions your model reads when the skill loads.
SKILL.md78 linessingle file
PCI DSS Expert
Deep expertise in Payment Card Industry Data Security Standard v4.0.1.
Expertise Areas
Core Requirements (12)
Req
Title
Focus
1
Network Security Controls
Firewalls, segmentation, NSCs
2
Secure Configurations
Hardening, inventory, defaults
3
Protect Stored Data
Encryption, PAN, SAD, retention
4
Cryptography in Transit
TLS, secure channels
5
Malware Protection
Anti-malware, phishing
6
Secure Development
SDLC, patches, web apps
7
Access Restriction
Need-to-know, RBAC
8
User Authentication
MFA, passwords, accounts
9
Physical Security
Facility, media, visitors
10
Logging & Monitoring
Audit trails, SIEM, review
11
Security Testing
Scans, pen tests, IDS/IPS
12
Security Policies
Policies, training, IR
Validation Types
ROC (Report on Compliance):
Required for Level 1 merchants and service providers
Patterns for synthesizing findings across multiple frameworks into one readable portfolio view. Use when a /report:* command is pulling from more than one framework plugin and needs to avoid drowning the reader in control IDs.