From domain-ecommerce
PCI DSS compliance for e-commerce: compliance levels (SAQ A, SAQ A-EP, SAQ D), cardholder data handling, tokenization (Stripe, Braintree tokens), secure payment forms (iframes, hosted fields), network segmentation, vulnerability scanning, penetration testing, and compliance audit preparation.
npx claudepluginhub rnavarych/alpha-engineer --plugin domain-ecommerceThis skill is limited to using the following tools:
- Choosing the right PCI compliance level (SAQ A vs. SAQ A-EP vs. SAQ D) for a checkout integration
Provides UI/UX resources: 50+ styles, color palettes, font pairings, guidelines, charts for web/mobile across React, Next.js, Vue, Svelte, Tailwind, React Native, Flutter. Aids planning, building, reviewing interfaces.
Fetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.
Calculates TAM/SAM/SOM using top-down, bottom-up, and value theory methodologies for market sizing, revenue estimation, and startup validation.
references/cardholder-data-tokenization.md — SAQ levels and selection criteria, what can/cannot be stored, tokenization per gateway (Stripe/Braintree/Adyen), iframe and hosted page secure form patternsreferences/network-security-audit.md — network segmentation requirements, internal and ASV vulnerability scanning, annual penetration testing, audit documentation and evidence collection