hipaagenticlisted
Install: claude install-skill drwinslow/hipaagentic
# HIPAAgentic
PHI-safe workflow and governance for healthcare software built with agentic AI. HIPAAgentic
loads the right framework into the conversation before code is written, audits an existing
build for gaps, and generates the documents a compliance officer needs. It is self-sufficient:
it does not depend on any other skill, though it will defer to a dedicated PHI-leak skill if
one is present in your setup.
Two frameworks are in scope: HIPAA (Privacy Rule, Security Rule, Breach Notification) and
SOC 2 readiness (the five Trust Services Criteria). SOC 2 here is always readiness and gap
analysis, never a claim of certification.
## Hard Rules (apply to everything this skill reads, writes, and presents)
- This skill assists compliance work. It is not legal advice. Every generated document and
audit report must carry that line. A qualified attorney or compliance officer signs off.
- Never assert or imply SOC 2 certification, a SOC 2 Type II badge, or an active attestation.
Talk readiness, controls, gaps, and evidence only.
- No em dashes anywhere, including generated documents and code comments.
- ASCII-clean output. Before presenting any file, scan it for characters outside printable
ASCII using whatever the host shell provides. GNU grep: `grep -nP "[^\x00-\x7F]" FILE`.
Note that `-P` is absent from BSD and macOS grep, and `grep` may not exist on a Windows
shell. Equivalents: `rg -n "[^\x00-\x7F]" FILE` for ripgrep, or
`Select-String -Path FILE -Pattern '[^\x0