checking-hipaa-compliance

checking-hipaa-compliance is a Privacy & regulatory compliance skill for AI agents, published by maziyarpanahi in the openmed repository on GitHub. Skillspace rates checking-hipaa-compliance C (79/100) and it passed the safety scan; a judge model has also reviewed it.

Runs a HIPAA Privacy and Security Rule checklist over a data pipeline and produces a gap report before deploying OpenMed on PHI. Use when the user is about to process protected health information, needs a pre-deployment compliance review, wants to know which administrative, physical, and technical safeguards apply, is scoping a Business Associate Agreement, or must document minimum-necessary and de-identification controls. Trigger keywords: HIPAA, Privacy Rule, Security Rule, 45 CFR 164, PHI, BAA, business associate, minimum necessary, safeguards, Safe Harbor, Expert Determination, gap analysis, compliance review. Pairs adjacent to OpenMed: the checklist shows where openmed.deidentify and signed audit reports satisfy the de-identification and audit-control requirements. The control list lives in references/hipaa-checklist.md. This is a structured self-assessment aid, not legal advice.

Grade
C
Quality
79 / 100
Safety
Passed
GitHub stars
5,313

Placed #3 of 6 in the judged category final for Privacy & regulatory compliance.

Our two independent classifiers differ on this skill's category, so treat the placement as provisional.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Our review

Architecture
97 / 100
Maturity
Packaged: licensed, with a version or references
Security scan
No issues found
License
Not declared. Check the repository before reusing it.

Judge review

Placed #3 of 6 in the judged category final for Privacy & regulatory compliance.

  • Trigger8585
  • Instructions8585
  • Specificity9090
  • Safety8585
  • Disclosure8585
  • Maintenance7575
Concrete, code-backed HIPAA gap-report workflow well integrated with sibling de-identification and audit skills, though tied closely to one product's API.

Not checked yet

  • Category is a classifier prediction; no model has read this skill yet
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.