菜单
List and search compliance rules in the HipaaLint database. Browse all 266 rules across HIPAA, HITRUST CSF, and SOC 2 Health in 6 categories. Filter by severity or category, and search by keyword. Each rule includes citations and remediation guidance.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | rules |
| description | List and search compliance rules in the HipaaLint database. Browse all 266 rules across HIPAA, HITRUST CSF, and SOC 2 Health in 6 categories. Filter by severity or category, and search by keyword. Each rule includes citations and remediation guidance. |
| user-invocable | true |
| argument-hint | [--category phi_protection] [--severity critical] [--query keyword] |
| allowed-tools | Read, Grep, Glob, Bash |
List and search HIPAA compliance rules.
/hipaalint-ai:rules [--category phi_protection] [--severity critical] [--query keyword]
--category — Filter by category: phi_protection, encryption, access_control, audit_logging, infrastructure, ai_governance--severity — Filter by severity: critical, high, medium, low--query — Search rules by keyword (searches title, description, and tags)| Category | Rule Prefixes | Description |
|---|---|---|
phi_protection | HIPAA-PHI-*, HITRUST-PHI-*, SOC2H-PHI-* | Protected Health Information safeguards |
encryption | HIPAA-ENC-*, HITRUST-ENC-*, SOC2H-ENC-* | Encryption and data-in-transit/at-rest |
access_control | HIPAA-AC-*, HITRUST-AC-*, SOC2H-AC-* | Authentication and authorization |
audit_logging | HIPAA-LOG-*, HITRUST-LOG-*, SOC2H-LOG-* | Audit trail and monitoring |
infrastructure | HIPAA-INFRA-*, HITRUST-INFRA-*, SOC2H-INFRA-* | Infrastructure security controls |
ai_governance | HIPAA-AI-*, HITRUST-AI-*, SOC2H-AI-* | AI/ML model governance |
HipaaLint Rules (266)
HIPAA-PHI-001: PHI in Log Statements
Severity: critical | Category: phi_protection
Detects Protected Health Information written to application logs
HIPAA-ENC-001: Unencrypted HTTP Usage
Severity: critical | Category: encryption
Detects HTTP URLs that should use HTTPS for data in transit
HIPAA-AC-001: Missing Auth Middleware
Severity: high | Category: access_control
Detects API routes handling PHI without authentication middleware
This skill invokes the compliance_rules MCP tool.
HIPAA compliance directives for AI-assisted development. Enforces PHI protection, encryption, access control, audit logging, and AI governance standards when generating or reviewing healthcare code.
Detect Protected Health Information (PHI) in code files. Identifies 18 HIPAA identifier types including names, SSNs, medical record numbers, dates of birth, and IP addresses in source code, logs, and configuration files.
Generate a HIPAA compliance audit report for a project. Produces JSON, SARIF, or PDF reports with executive summary, scored findings, domain breakdown, and prioritized remediation recommendations.
Scan a project directory for HIPAA compliance violations. Detects PHI exposure, encryption gaps, access control issues, and audit logging gaps. Returns findings grouped by severity with HIPAA citations and remediation guidance.
Calculate the HipaaLint compliance score for a project. Returns a weighted 0-100 score across 6 HIPAA domains (PHI Protection, Encryption, Access Control, Audit Logging, Infrastructure, AI Governance) with band classification.