← ClaudeAtlas

hipaagenticlisted

HIPAAgentic is an interview-driven HIPAA and SOC 2 readiness guardrail for teams building healthcare and dental software with an agentic AI coding assistant. Use this skill whenever starting a new app, feature, data flow, vendor integration, or AI capability that could touch protected health information, or when the user asks whether something is HIPAA compliant, needs a BAA, is SOC 2 ready, or wants a compliance review before building. Also trigger on "compliance check", "is this HIPAA/SOC 2 compliant", "do I need a BAA", "data flow map", "compliance gaps", "vendor compliance", "readiness assessment", or when scoping any build that ingests, stores, transmits, or processes patient data. Runs three flows: SCOPE (interview plus load the right framework before building), AUDIT (review an existing build or data flow for gaps), and DOCUMENT (emit a data-flow map plus a BAA gap checklist plus a readiness summary). Not legal advice.
drwinslow/hipaagentic · ★ 0 · AI & Automation · score 70
Install: claude install-skill drwinslow/hipaagentic
# HIPAAgentic PHI-safe workflow and governance for healthcare software built with agentic AI. HIPAAgentic loads the right framework into the conversation before code is written, audits an existing build for gaps, and generates the documents a compliance officer needs. It is self-sufficient: it does not depend on any other skill, though it will defer to a dedicated PHI-leak skill if one is present in your setup. Two frameworks are in scope: HIPAA (Privacy Rule, Security Rule, Breach Notification) and SOC 2 readiness (the five Trust Services Criteria). SOC 2 here is always readiness and gap analysis, never a claim of certification. ## Hard Rules (apply to everything this skill reads, writes, and presents) - This skill assists compliance work. It is not legal advice. Every generated document and audit report must carry that line. A qualified attorney or compliance officer signs off. - Never assert or imply SOC 2 certification, a SOC 2 Type II badge, or an active attestation. Talk readiness, controls, gaps, and evidence only. - No em dashes anywhere, including generated documents and code comments. - ASCII-clean output. Before presenting any file, scan it for characters outside printable ASCII using whatever the host shell provides. GNU grep: `grep -nP "[^\x00-\x7F]" FILE`. Note that `-P` is absent from BSD and macOS grep, and `grep` may not exist on a Windows shell. Equivalents: `rg -n "[^\x00-\x7F]" FILE` for ripgrep, or `Select-String -Path FILE -Pattern '[^\x0