hipaa-compliance
Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user health data, check-ins, journal entries, or any sensitive information. Activates for audit logging, data access, security events, and compliance questions.
npx skills add FreedomIntelligence/OpenClaw-Medical-Skills --skill hipaa-compliance --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# HIPAA Compliance for Recovery Coach This skill helps you maintain HIPAA compliance when developing features that handle Protected Health Information (PHI). ## What is PHI in This Application? | Data Type | PHI Status | Handling | |-----------|------------|----------| | Check-in mood/cravings | PHI | Audit all access | | Journal entries | PHI | Audit all access | | Chat conversations | PHI | Audit all access | | User profile (name, email) | PHI | Audit modifications | | Sobriety date | PHI | Audit access | | Emergency contacts | PHI | Audit access | | Usage analytics (aggregated) | NOT PHI | No audit needed | | Page views (no content) | NOT PHI | No audit needed | ## Audit Logging Requirements ### When to Log **Always log these operations:** - Viewing any PHI (check-ins, journal, messages) - Creating/updating/deleting PHI - Exporting user data - Admin access to user information - Failed authentication attempts - Security events (rate limiting, unauthorized access) ### How to Log Use the audit logging utilities in `src/lib/hipaa/audit.ts`: ```typescript import { logPHIAccess, logPHIModification, logSecurityEvent, logAdminAction } from '@/lib/hipaa/audit'; // Viewing PHI await logPH
- What is PHI in This Application?
- Audit Logging Requirements
- When to Log
- How to Log
- Data Sanitization
- Never Log These Fields
- Sanitized Fields (Auto-Redacted)
- Session Security Requirements
- Code Patterns
- API Route with Audit Logging
- Component with PHI Access
- Compliance Checklist
- Audit Log Retention
- Emergency Access (Break Glass)
What does the hipaa-compliance skill do?
Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user health data, check-ins, journal entries, or any sensitive information. Activates for audit logging, data access, security events, and compliance questions.
How do I install it?
Run `npx skills add FreedomIntelligence/OpenClaw-Medical-Skills --skill hipaa-compliance --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From FreedomIntelligence/OpenClaw-Medical-Skills, a repository with 2,909 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.