Hipaa Compliance Guard
- 217 installs
- 2 repo stars
- Updated January 25, 2026
- jorgealves/agent_skills
Audit healthcare apps handling PHI for HIPAA Technical Safeguards, access controls, encryption, audit logging, and BAAs before production release.
About
Guides agents through HIPAA Technical Safeguard checks for apps that store or transmit protected health information, covering encryption, access controls, audit trails, and release-blocking compliance gaps.
- PHI handling review
- Technical Safeguards checklist
- Access control validation
- Encryption and audit logging
- BAA readiness guidance
Hipaa Compliance Guard by the numbers
- 217 all-time installs (skills.sh)
- +8 installs in the week ending Aug 2, 2026 (Skillselion tracking)
- Ranked #742 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Aug 2, 2026 (Skillselion catalog sync)
npx skills add https://github.com/jorgealves/agent_skills --skill hipaa-compliance-guardAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 217 |
|---|---|
| repo stars | ★ 2 |
| Last updated | January 25, 2026 |
| Repository | jorgealves/agent_skills ↗ |
What it does
Audit healthcare apps handling PHI for HIPAA Technical Safeguards, access controls, encryption, audit logging, and BAAs before production release.
Files
HIPAA Compliance Guard
Purpose and Intent
The hipaa-compliance-guard is a specialized auditing tool for the healthcare industry. Its goal is to provide a technical assessment of how well an application adheres to the HIPAA Security Rule, specifically focusing on the protection of Electronic Protected Health Information (ePHI).
When to Use
- Architecture Reviews: Run during the design phase to ensure encryption and logging are planned.
- Pre-Audit Self-Assessment: Use before a formal 3rd-party HIPAA audit to identify and fix low-hanging violations.
- Infrastructure Changes: Run after modifying Terraform or Cloud scripts to ensure security groups or encryption haven't been compromised.
When NOT to Use
- Real Patient Data: This tool should NOT be used on live databases containing PHI. It is for checking the systems that handle the data.
- Legal Certification: Passing this audit does not mean you are "HIPAA Certified"; it means your technical configuration follows best practices.
Error Conditions and Edge Cases
- Obfuscated Infrastructure: If cloud resources are created via manual console actions (ClickOps) instead of code, this tool cannot see them.
- Custom Encryption: Proprietary or non-standard encryption methods may be flagged as warnings.
Security and Data-Handling Considerations
- No PHI Access: The tool is designed to look at configurations, not data.
- Local Analysis: Keep your infrastructure code local and run the scan within your trusted environment.
name: hipaa-compliance-guard
version: 1.0.0
description: Audits HealthTech applications for HIPAA technical safeguards like encryption and audit logging. Use when reviewing healthcare infrastructure or ensuring PHI is handled according to legal security standards.
inputs:
project_root:
type: string
description: Path to the codebase or configuration directory.
required: true
cloud_provider:
type: string
enum: [aws, gcp, azure]
description: The cloud infrastructure provider being used.
outputs:
compliance_score:
type: integer
description: A score from 0-100 based on detected safeguards.
findings:
type: array
items:
type: object
properties:
category:
type: string
status:
type: string
enum: [compliant, violation, warning]
description:
type: string
capabilities:
- Terraform/CloudFormation configuration scanning.
- PHI entry point identification in code models.
- Audit logging presence verification.
constraints:
- Technical risk assessment only; not legal advice.
- Limited to visible configuration files.
security:
- MUST NOT ingest actual patient data (PHI).
- Audits patterns and infrastructure only.
examples:
- input:
project_root: "./infra"
cloud_provider: "aws"
output:
compliance_score: 85
findings:
- category: "Encryption"
status: "compliant"
description: "S3 buckets have encryption enabled."Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85