Does this skill help with PHI security?

Yes, it identifies potential risks in how Protected Health Information (PHI) is handled, focusing on encryption, access controls, and data leakage risks.

Can I use this for cloud infrastructure audits?

Absolutely. It is designed to assess cloud configurations for HIPAA readiness, checking things like security group settings and storage encryption.

What parts of my project does the HIPAA Compliance Checker scan?

It scans source code, infrastructure configuration files (such as AWS or Terraform), and technical documentation for patterns and settings that violate HIPAA standards.

Does this replace a formal HIPAA audit?

While it is a powerful tool for identifying vulnerabilities and preparing for audits, it should be used as part of a broader compliance strategy alongside professional legal and security reviews.

HIPAA Compliance Checker

Name: HIPAA Compliance Checker
Author: jeremylongshore

byjeremylongshore

•

884

Security & Testing

Scans codebases and infrastructure configurations to identify potential HIPAA compliance violations and security vulnerabilities.

About

The HIPAA Compliance Checker skill enables developers and security professionals to proactively manage regulatory requirements by auditing source code, cloud infrastructure configurations, and technical documentation for Health Insurance Portability and Accountability Act (HIPAA) violations. It identifies critical risks related to Protected Health Information (PHI) handling, insecure data storage, and inadequate access controls, delivering actionable reports that help ensure software systems are audit-ready and maintain high security standards throughout the development lifecycle.

Key Features

Automated codebase scanning for insecure PHI handling patterns
884 GitHub stars
Infrastructure as Code (IaC) audits for cloud security compliance
Detailed reporting on data privacy and access control vulnerabilities
Documentation verification against HIPAA regulatory guidelines
Proactive remediation recommendations for identified security gaps

Use Cases

Assessing AWS infrastructure configurations for HIPAA-compliant networking and encryption
Auditing a patient data API to ensure encrypted storage and strict access controls
Verifying that project documentation adheres to mandatory health data privacy standards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills hipaa-compliance-checker

For use in Claude.ai and ChatGPT

Download Skill

GitHub