メニュー
Scan a project directory for HIPAA compliance violations. Detects PHI exposure, encryption gaps, access control issues, and audit logging gaps. Returns findings grouped by severity with HIPAA citations and remediation guidance.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
HIPAA compliance directives for AI-assisted development. Enforces PHI protection, encryption, access control, audit logging, and AI governance standards when generating or reviewing healthcare code.
Detect Protected Health Information (PHI) in code files. Identifies 18 HIPAA identifier types including names, SSNs, medical record numbers, dates of birth, and IP addresses in source code, logs, and configuration files.
Generate a HIPAA compliance audit report for a project. Produces JSON, SARIF, or PDF reports with executive summary, scored findings, domain breakdown, and prioritized remediation recommendations.
List and search compliance rules in the HipaaLint database. Browse all 266 rules across HIPAA, HITRUST CSF, and SOC 2 Health in 6 categories. Filter by severity or category, and search by keyword. Each rule includes citations and remediation guidance.
Calculate the HipaaLint compliance score for a project. Returns a weighted 0-100 score across 6 HIPAA domains (PHI Protection, Encryption, Access Control, Audit Logging, Infrastructure, AI Governance) with band classification.
| name | scan |
| description | Scan a project directory for HIPAA compliance violations. Detects PHI exposure, encryption gaps, access control issues, and audit logging gaps. Returns findings grouped by severity with HIPAA citations and remediation guidance. |
| user-invocable | true |
| argument-hint | [path] [--sensitivity strict|balanced|relaxed] |
| allowed-tools | Read, Grep, Glob, Bash |
Scan the current project for HIPAA compliance violations.
/hipaalint-ai:scan [path] [--sensitivity balanced]
path — Directory to scan (default: current project root)--sensitivity — Detection sensitivity: strict, balanced (default), relaxedHipaaLint Scan Results
Files scanned: 47 | Rules evaluated: 266
CRITICAL (2)
HIPAA-PHI-001 PHI in Log Statements src/services/patient.ts:45
HIPAA-ENC-001 Unencrypted HTTP Usage src/api/client.ts:12
HIGH (3)
HIPAA-PHI-005 IP Address in Logs src/middleware/logger.ts:23
HIPAA-AC-001 Missing Auth Middleware src/routes/patients.ts:8
HIPAA-ENC-002 Weak Hashing Algorithm src/auth/password.ts:15
Each finding includes the HIPAA citation (e.g., 45 CFR §164.312(e)(1)) and actionable remediation.
Add --fix to auto-remediate simple violations:
/hipaalint-ai:scan [path] --fix --dry-run # preview changes
/hipaalint-ai:scan [path] --fix # apply fixes
This skill invokes the compliance_scan MCP tool.