Skip to content

Skill proposal: fsi-compliance-checker (PCI-DSS v4.0 + MAS TRM compliance review) #1054

@timwukp

Description

@timwukp

Hi! Checking fit before opening a PR, per your contribution guidelines (real use case, tested, portable).

Proposed skill: fsi-compliance-checker — reviews code/architecture/infrastructure changes against financial-services compliance frameworks, mapping findings to specific control IDs in PCI-DSS v4.0 and MAS TRM (Singapore financial regulator), with per-framework reference files loaded on demand (progressive disclosure).

Source: https://github.com/timwukp/agent-skills-best-practice/tree/main/skills/skills/fsi-compliance-checker

How it measures against your requirements:

  • Real use case: built from enterprise FSI/banking engineering practice (AWS SA context, Singapore-regulated institutions); PCI-DSS v4.0's future-dated requirements became mandatory March 2025, so teams are actively dealing with this.
  • Tested: ships evals/ (task evals + should/should-not trigger queries); the repo documents a 4-layer test methodology with recorded results, including real Claude Code verification (TESTING.md).
  • Portable: standard Agent Skills spec fields only, instruction+references (no scripts) — works on Claude Code, Claude.ai, API, and Kiro.
  • Safe: read-only review skill; every report carries a "not a substitute for a qualified assessor" disclaimer.

I didn't find existing FSI/banking-compliance coverage in the list. If this fits, I'll open a PR following your skill folder format — or adjust per your feedback. Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions