Map code changes to PCI-DSS and MAS TRM compliance controls

FSI Compliance Checker is one of the skills in the "Agentic Skills Best Practices" collection, built for AWS solutions architects and developers using Kiro, and does exactly what the repository describes it for: it maps a proposed code or infrastructure change to PCI-DSS v4.0 and MAS (Monetary Authority of Singapore) Technology Risk Management (TRM) controls, backed by domain-organized reference files rather than one flat rulebook. Like the collection's other instruction-only skills - the Secure SDLC role skills and the Cloud Architecture Well-Architected review skill - it needs nothing from the host beyond support for the Agent Skills specification. It is plain markdown with no bundled executable scripts, so it does not require a platform that permits code execution.

Use it when a change needs to be checked against PCI-DSS v4.0 or MAS TRM compliance controls before it ships - the kind of review an AWS SA or developer working in a financial-services context would otherwise do by hand against two separate regulatory frameworks. It is not one of the repository's three flagship, evidence-backed skills (agentcore-harness-builder, gitlab-ci-kiro-pipeline, ai-native-sdlc), which are validated end-to-end against real AWS infrastructure or ship their own enforcement gate with mutation-proven tests and signed releases - FSI Compliance Checker is an instruction-only reference skill without that level of documented external verification. It is also not a document-generation skill (docx, pdf, pptx, xlsx); the repository deliberately excludes those and points to Anthropic's own anthropics/skills repository for them instead.

As an instruction-only skill it is plain markdown plus domain-organized reference files for its PCI-DSS v4.0 and MAS TRM controls, and needs nothing beyond a host that implements the Agent Skills specification's standard fields (name, description, license, metadata) - no platform-private extensions, no bundled scripts, and no extra runtime dependencies to install.

Install it like any skill in this repository: ./install.sh <skill-name>, or ./install.sh --all for the whole collection, into ~/.kiro/skills/ (global) or .kiro/skills/ (project) for Kiro, or ~/.claude/skills/ (or via the plugin marketplace) for Claude Code. The repository's skills are portable by construction across every platform that implements the Agent Skills specification - Kiro IDE and CLI, Claude Code, Claude.ai, and the Claude API - and this repository's skills have been verified end-to-end on both Kiro and Claude Code, per its own TESTING.md. Every push and pull request is checked by a GitHub Actions workflow that validates SKILL.md frontmatter, required fields, and naming conventions.

AWS solutions architects and developers working in or adjacent to financial services who want a repeatable, reference-file-backed way to map a change against PCI-DSS v4.0 and MAS TRM controls, alongside the same collection's broader Secure SDLC and Cloud Architecture review skills. It is licensed under the MIT License, along with the rest of the repository's own docs, workshop material, and engineering skills - a handful of example skills imported from Anthropic's own repository are separately licensed Apache 2.0.