auditing-safe-harbor-checklist
Verify OpenMed de-identified output against all 18 HIPAA Safe Harbor identifier categories and report residual re-identification risk. Use when the user must confirm a note meets HIPAA Safe Harbor (45 CFR 164.514(b)(2)), needs a coverage checklist mapping detected entities to the 18 categories, wants to flag gaps like ages over 89, rare geography, fax vs phone, or biometrics, or asks whether masking was complete. Maps OpenMed CANONICAL_LABELS to the 18 HIPAA classes and uses extract_pii / deidentify to check coverage. Pairs with OpenMed deidentifying-clinical-text and auditing-deidentification
npx skills add maziyarpanahi/openmed --skill auditing-safe-harbor-checklist --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Auditing against the HIPAA Safe Harbor checklist The Safe Harbor method (45 CFR 164.514(b)(2)) de-identifies PHI by removing **18 specific identifier categories** for the individual and their relatives, employers, and household members — and requires the covered entity to have **no actual knowledge** that the remainder could re-identify anyone. This skill turns that legal checklist into a concrete coverage check over OpenMed output: which of the 18 categories were detected and handled, and where the gaps are. The full mapping table lives in [references/safe-harbor-identifiers.md](references/safe-harbor-identifiers.md) — all 18 categories, their OpenMed HIPAA class, the matching `CANONICAL_LABELS`, and per-category cautions. Read it when you need the authoritative cross-walk. ## When to use this skill Use it after a de-identification run to *prove* coverage, or before release to decide whether Safe Harbor is even achievable for this text. If the user needs a signed, retained record of the run, hand off to `auditing-deidentification-runs`. ## Quick start: coverage check ```python import openmed from openmed.core.labels import LABEL_TO_HIPAA, HIPAA_SAFE_HARBOR_CLASSES note = ( "Pati
- When to use this skill
- Quick start: coverage check
- Workflow
- Hand-off to / from OpenMed
- Edge cases & gotchas
- Standards & references
What does the auditing-safe-harbor-checklist skill do?
Verify OpenMed de-identified output against all 18 HIPAA Safe Harbor identifier categories and report residual re-identification risk. Use when the user must confirm a note meets HIPAA Safe Harbor (45 CFR 164.514(b)(2)), needs a coverage checklist mapping detected entities to the 18 categories, wants to flag gaps like ages over 89, rare geography, fax vs phone, or biometrics, or asks whether masking was complete. Maps OpenMed CANONICAL_LABELS to the 18 HIPAA classes and uses extract_pii / deidentify to check coverage. Pairs with OpenMed deidentifying-clinical-text and auditing-deidentification
How do I install it?
Run `npx skills add maziyarpanahi/openmed --skill auditing-safe-harbor-checklist --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From maziyarpanahi/openmed, a repository with 4,851 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.