메뉴
List and search compliance rules in the HipaaLint database. Browse all 266 rules across HIPAA, HITRUST CSF, and SOC 2 Health in 6 categories. Filter by severity or category, and search by keyword. Each rule includes citations and remediation guidance.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
HIPAA compliance directives for AI-assisted development. Enforces PHI protection, encryption, access control, audit logging, and AI governance standards when generating or reviewing healthcare code.
Detect Protected Health Information (PHI) in code files. Identifies 18 HIPAA identifier types including names, SSNs, medical record numbers, dates of birth, and IP addresses in source code, logs, and configuration files.
Generate a HIPAA compliance audit report for a project. Produces JSON, SARIF, or PDF reports with executive summary, scored findings, domain breakdown, and prioritized remediation recommendations.
Scan a project directory for HIPAA compliance violations. Detects PHI exposure, encryption gaps, access control issues, and audit logging gaps. Returns findings grouped by severity with HIPAA citations and remediation guidance.
Calculate the HipaaLint compliance score for a project. Returns a weighted 0-100 score across 6 HIPAA domains (PHI Protection, Encryption, Access Control, Audit Logging, Infrastructure, AI Governance) with band classification.
SOC 직업 분류 기준
| name | rules |
| description | List and search compliance rules in the HipaaLint database. Browse all 266 rules across HIPAA, HITRUST CSF, and SOC 2 Health in 6 categories. Filter by severity or category, and search by keyword. Each rule includes citations and remediation guidance. |
| user-invocable | true |
| argument-hint | [--category phi_protection] [--severity critical] [--query keyword] |
| allowed-tools | Read, Grep, Glob, Bash |
List and search HIPAA compliance rules.
/hipaalint-ai:rules [--category phi_protection] [--severity critical] [--query keyword]
--category — Filter by category: phi_protection, encryption, access_control, audit_logging, infrastructure, ai_governance--severity — Filter by severity: critical, high, medium, low--query — Search rules by keyword (searches title, description, and tags)| Category | Rule Prefixes | Description |
|---|---|---|
phi_protection | HIPAA-PHI-*, HITRUST-PHI-*, SOC2H-PHI-* | Protected Health Information safeguards |
encryption | HIPAA-ENC-*, HITRUST-ENC-*, SOC2H-ENC-* | Encryption and data-in-transit/at-rest |
access_control | HIPAA-AC-*, HITRUST-AC-*, SOC2H-AC-* | Authentication and authorization |
audit_logging | HIPAA-LOG-*, HITRUST-LOG-*, SOC2H-LOG-* | Audit trail and monitoring |
infrastructure | HIPAA-INFRA-*, HITRUST-INFRA-*, SOC2H-INFRA-* | Infrastructure security controls |
ai_governance | HIPAA-AI-*, HITRUST-AI-*, SOC2H-AI-* | AI/ML model governance |
HipaaLint Rules (266)
HIPAA-PHI-001: PHI in Log Statements
Severity: critical | Category: phi_protection
Detects Protected Health Information written to application logs
HIPAA-ENC-001: Unencrypted HTTP Usage
Severity: critical | Category: encryption
Detects HTTP URLs that should use HTTPS for data in transit
HIPAA-AC-001: Missing Auth Middleware
Severity: high | Category: access_control
Detects API routes handling PHI without authentication middleware
This skill invokes the compliance_rules MCP tool.