hipaa-safeguards
Map HIPAA Security Rule safeguards and run a risk analysis for systems handling PHI. Use when asked to become HIPAA-compliant, assess HIPAA safeguards, prepare for handling PHI/ePHI, or scope a BAA. Produces a HIPAA assessment — the administrative/physical/technical safeguards with required-vs-addressable status, a risk analysis, BAA scope, and a prioritised remediation plan.
npx skills add mohitagw15856/pm-claude-skills --skill hipaa-safeguards --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# HIPAA Safeguards Skill HIPAA's Security Rule is a list of safeguards for electronic protected health information (ePHI), split into administrative, physical, and technical — some **required**, some **addressable** (you must do them *or* document why an equivalent is reasonable). This skill maps your controls to that list, runs the risk analysis HIPAA mandates, and flags where you're exposed — so handling PHI is defensible, not hopeful. ## Required Inputs Ask for these only if they aren't already provided: - **Your role** — covered entity, or business associate (a vendor handling PHI for one). Both owe Security Rule safeguards. - **The ePHI flow** — where PHI is created, received, stored, transmitted, and who can access it. - **Current safeguards** — what's in place for access control, encryption, audit logging, backups, training. - **Business associates** — third parties touching PHI (each needs a BAA). ## Output Format ### HIPAA Assessment: [entity] ([covered entity / business associate]) **1. ePHI inventory & flow** — where PHI lives and moves; the systems in scope. **2. Safeguards** — a table per category; status `met` / `partial` / `gap`, and required vs. addressable: | Categ
- Required Inputs
- Output Format
- HIPAA Assessment: [entity] ([covered entity / business associate])
- Programmatic Helper
- Quality Checks
- Anti-Patterns
- Based On
python3 scripts/hipaa_checklist.py safeguards.json python3 scripts/hipaa_checklist.py safeguards.json --json
What does the hipaa-safeguards skill do?
Map HIPAA Security Rule safeguards and run a risk analysis for systems handling PHI. Use when asked to become HIPAA-compliant, assess HIPAA safeguards, prepare for handling PHI/ePHI, or scope a BAA. Produces a HIPAA assessment — the administrative/physical/technical safeguards with required-vs-addressable status, a risk analysis, BAA scope, and a prioritised remediation plan.
How do I install it?
Run `npx skills add mohitagw15856/pm-claude-skills --skill hipaa-safeguards --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mohitagw15856/pm-claude-skills, a repository with 1,255 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.