HIPAA Guardian

A comprehensive PHI/PII detection and HIPAA compliance skill for AI agents, with a strong focus on developer code security patterns. Detects all 18 HIPAA Safe Harbor identifiers in data files and source code, provides risk scoring, maps findings to HIPAA regulations, and generates audit reports with remediation guidance.

Capabilities

1. PHI/PII Detection - Scan data files for the 18 HIPAA Safe Harbor identifiers
2. Code Scanning - Detect PHI in source code, comments, test fixtures, configs
3. Auth Gate Detection - Find API endpoints exposing PHI without authentication
4. Log Safety Audit - Detect PHI leaking into log statements
5. Classification - Classify findings as PHI, PII, or sensitive_nonPHI
6. Risk Scoring - Score findings 0-100 based on sensitivity and exposure
7. HIPAA Mapping - Map each finding to specific HIPAA rules
8. Audit Reports - Generate findings.json, audit reports, and playbooks
9. Remediation - Provide step-by-step remediation with code examples
10. Control Checks - Validate security controls are in place

Usage