payment-pci-security

Route tokenized card data through a Secure Proxy for PCI DSS compliance.

39|9|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/vtex/ai-skills --skill payment-pci-security-vtex
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: payment-pci-security
Source: https://github.com/vtex/ai-skills/tree/main/tracks/payment/skills/payment-pci-security
Command: npx skills add https://github.com/vtex/ai-skills --skill payment-pci-security-vtex

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps engineering teams implement PCI DSS compliant payment connectors by properly routing card data through a Secure Proxy, thereby preventing exposure of raw card data and ensuring proper tokenization.

Core Features & Use Cases

  • Secure Proxy-driven data flow for card payments
  • Tokenization and safe data handling with PCI DSS alignment
  • Guidance for when to use Secure Proxy vs direct acquirer calls and logging safeguards

Quick Start

Enable Secure Proxy for non-PCI environments by configuring secureProxyUrl and tokenized card data in your Create Payment requests.

Frequently Asked Questions about payment-pci-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I ensure PCI DSS compliance when processing card payments?

PCI DSS compliance for card payments is ensured by routing tokenized card data through a Secure Proxy. This approach prevents raw card data exposure and provides implementation patterns for building compliant payment connectors.

When should I use a Secure Proxy versus direct acquirer calls for payments?

Use a Secure Proxy for non-PCI environments to safely handle tokenized card data, while direct acquirer calls may be used in specific compliant setups. The Skill provides rules for choosing the correct routing method.

How do I configure a Secure Proxy for tokenized card data?

Configure the Secure Proxy by setting the secureProxyUrl and including tokenized card data in your Create Payment requests. This enables safe data flow without exposing raw card information.

What logging safeguards are required for PCI-compliant payment processing?

PCI-compliant payment processing requires strict data-handling and logging safeguards to prevent raw card data exposure. The Skill enforces these checks to ensure tokenized data flows securely through the proxy.

Do I need a Secure Proxy to prevent raw card data exposure in my payment connector?

A Secure Proxy is needed to prevent raw card data exposure in non-PCI environments. It acts as a compliant intermediary that safely routes and tokenizes sensitive payment information.

What is the best way to handle card tokenization for PCI DSS compliance?

The best way to handle card tokenization for PCI DSS compliance is by routing payment data through a Secure Proxy. This ensures raw card data is never directly exposed or logged during processing.