What kind of output does the assessment provide?

It generates a detailed Markdown report featuring compliance scores, a gap analysis with severity levels, a risk assessment summary, and a prioritized remediation roadmap.

Is the assessment output legally binding?

No, this skill provides a technical and procedural assessment to aid in compliance efforts. Official HIPAA certification requires review by qualified legal or healthcare auditing professionals.

Does it evaluate Business Associate Agreements (BAA)?

Yes, it classifies entities as either Covered Entities or Business Associates and includes a review of BAA coverage and inventory.

What is the assess-hipaa skill?

The assess-hipaa skill is a specialized capability for Claude Code that automates the process of conducting HIPAA compliance assessments for healthcare systems, identifying risks and security gaps.

Can this skill identify Protected Health Information (PHI)?

Yes, the skill includes a PHI identification phase that maps data flows, documents storage locations, and identifies access points for sensitive health data.

HIPAA Compliance Assessor

Name: HIPAA Compliance Assessor
Author: melodic-software

bymelodic-software

•

安全与测试

Conducts comprehensive HIPAA compliance assessments for healthcare systems and applications handling Protected Health Information (PHI).

The HIPAA Compliance Assessor is a specialized skill designed to automate and streamline the auditing of systems that process sensitive medical data. By analyzing system architectures, data flows, and existing documentation, it evaluates administrative, physical, and technical safeguards against rigorous HIPAA standards. This tool is indispensable for developers and compliance officers who need to identify security gaps, classify entities, and generate structured remediation roadmaps to ensure regulatory compliance and data integrity in healthcare environments.

主要功能

01Entity classification for Covered Entities and Business Associates

02Automated PHI identification and data flow mapping

03Detailed assessment of administrative, physical, and technical safeguards

04Comprehensive risk assessment and threat identification

0538 GitHub stars

06Generation of structured remediation roadmaps and compliance reports

使用场景

01Auditing a patient portal for secure messaging and PHI access controls

02Evaluating an Electronic Health Record (EHR) system for multi-provider access security

03Assessing healthcare analytics platforms for data de-identification and transmission security

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add melodic-software/claude-code-plugins assess-hipaa

For use in Claude.ai and ChatGPT

Download Skill