The Agent Skills Directory

[SAFE]: The skill enforces robust encryption for PHI by mandating the use of the aesCbcCryptoModule (AES-256-CBC) and ensuring all transmissions occur over secure TLS/SSL connections.\n- [SAFE]: It implements secure credential management by instructing users to store sensitive keys like cipher keys and secret keys in environment variables or secure vaults, specifically warning against hardcoding them in client-side code.\n- [SAFE]: The skill provides a secure authorization model using PubNub Access Manager v3, employing short-lived, role-based tokens to adhere to the principle of least privilege for patients, providers, and nurses.\n- [SAFE]: It includes defensive implementation for file sharing, including explicit validation of allowed MIME types (e.g., PDF, JPEG, DICOM) and strict file size limits to prevent denial-of-service or execution of malicious files.\n- [SAFE]: The skill promotes compliance through mandatory audit logging of all actions involving sensitive data, while ensuring that audit trails only contain references (IDs) rather than raw PHI.\n- [SAFE]: For real-time video signaling, the skill forces the use of TURN relays (iceTransportPolicy: 'relay') to ensure that media traffic is routed through controlled infrastructure, meeting healthcare regulatory requirements.

pubnub-telemedicine