New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Hipaa Compliance

by affaan-m in affaan-m/ECC

针对医疗隐私和安全工作的HIPAA特定入口点。当任务明确围绕HIPAA、PHI处理、受保实体、BAA、违规态势或美国医疗合规要求时使用。

MITAuto-check passedLegal & Compliance

Install Hipaa Compliance

skills CLI
$ npx skills add affaan-m/ECC --skill hipaa-compliance -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install affaan-m/ECC hipaa-compliance --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .claude/skills && cp -r skills-src/docs/zh-CN/skills/hipaa-compliance .claude/skills/hipaa-compliance && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
hipaa-compliance
GitHub stars
276k
Token cost
~411 tokens
SKILL.md length
114 words
Files
1
Skills in repo
683
Repo updated
First seen
Licence
MIT

At a glance

针对医疗隐私和安全工作的HIPAA特定入口点。当任务明确围绕HIPAA、PHI处理、受保实体、BAA、违规态势或美国医疗合规要求时使用。

  • Works in 3 steps: 从 healthcare-phi-compliance 开始，获取具体的实施规则。 → 应用 HIPAA 专用决策门 → 如果任务影响患者安全、临床工作流或受监管的生产架构，则升级至…
  • Tasks that involve Healthcare and finance regulation
  • SKILL.md covers 使用时机, 工作原理, HIPAA 专用防护栏 and 示例, plus 1 more section
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Hipaa Compliance is an agent skill from affaan-m/ECC. 针对医疗隐私和安全工作的HIPAA特定入口点。当任务明确围绕HIPAA、PHI处理、受保实体、BAA、违规态势或美国医疗合规要求时使用。

Its SKILL.md is about 410 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Legal & Compliance, covering Healthcare and finance regulation. The repository describes itself as: The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond. The licence is MIT.

When your agent uses it

  • Tasks that involve Healthcare and finance regulation

Example prompts

  • “/hipaa-compliance”

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

  1. 从 healthcare-phi-compliance 开始，获取具体的实施规则。
  2. 应用 HIPAA 专用决策门
  3. 如果任务影响患者安全、临床工作流或受监管的生产架构，则升级至 healthcare-reviewer。

What it can do on your machine

Read from SKILL.md and the folder at commit 4eb71d9. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Hipaa Compliance loads about 411 tokens when it runs. Until then it costs about 21 tokens; SKILL.md has 114 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~21
When it runs · the whole SKILL.md, loaded when a task matches
~411

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from affaan-m/ECC at commit 4eb71d9, republished under its MIT licence (© affaan-m). 114 words, ~411 tokens.

Download SKILL.mdSave it as .claude/skills/hipaa-compliance/SKILL.md (or your agent's skills folder).
name
hipaa-compliance
description
针对医疗隐私和安全工作的HIPAA特定入口点。当任务明确围绕HIPAA、PHI处理、受保实体、BAA、违规态势或美国医疗合规要求时使用。
origin
ECC direct-port adaptation
version
1.0.0

HIPAA 合规

当任务明确涉及美国医疗合规时，以此作为 HIPAA 专用入口。此技能刻意保持精简和规范：

  • healthcare-phi-compliance 仍是处理 PHI/PII、数据分类、审计日志、加密和泄露防护的主要实施技能。
  • healthcare-reviewer 仍是当代码、架构或产品行为需要医疗感知的二次审查时的专业审核者。
  • security-review 仍适用于通用认证、输入处理、密钥、API 和部署加固。

使用时机

  • 请求明确提及 HIPAA、PHI、受保实体、业务伙伴或 BAA
  • 构建或审查存储、处理、导出或传输 PHI 的美国医疗软件
  • 评估日志记录、分析、LLM 提示、存储或支持工作流是否产生 HIPAA 暴露风险
  • 设计面向患者或临床医生的系统时，需关注最小必要访问和可审计性

工作原理

将 HIPAA 视为覆盖在更广泛的医疗隐私技能之上的叠加层：

  1. 从 healthcare-phi-compliance 开始，获取具体的实施规则。
  2. 应用 HIPAA 专用决策门：
    • 这些数据是否为 PHI？
    • 该行为者是否为受保实体或业务伙伴？
    • 供应商或模型提供商在接触数据前是否需要 BAA？
    • 访问权限是否限制在最小必要范围内？
    • 读/写/导出事件是否可审计？
  3. 如果任务影响患者安全、临床工作流或受监管的生产架构，则升级至 healthcare-reviewer。

HIPAA 专用防护栏

  • 切勿将 PHI 置于日志、分析事件、崩溃报告、提示或客户端可见的错误字符串中。
  • 切勿在 URL、浏览器存储、截图或复制的示例负载中暴露 PHI。
  • 要求对 PHI 的读写操作进行认证访问、范围授权并保留审计追踪。
  • 默认将第三方 SaaS、可观测性、支持工具和 LLM 提供商视为禁止状态，直至明确其 BAA 状态和数据边界。
  • 遵循最小必要访问原则：正确的用户应仅看到完成任务所需的最小 PHI 片段。
  • 优先使用不透明的内部 ID，而非姓名、病历号、电话号码、地址或其他标识符。

示例

示例 1：以 HIPAA 为框架的产品需求

用户请求：

为我们的临床医生仪表板添加 AI 生成的就诊摘要。我们服务美国诊所，需保持 HIPAA 合规。

响应模式：

  • 激活 hipaa-compliance
  • 使用 healthcare-phi-compliance 审查 PHI 流动、日志记录、存储和提示边界
  • 在发送任何 PHI 前，验证摘要生成提供商是否受 BAA 覆盖
  • 如果摘要影响临床决策，则升级至 healthcare-reviewer
示例 2：供应商/工具决策

用户请求：

我们可以将支持对话记录和患者消息发送到分析平台吗？

响应模式：

  • 假设这些消息可能包含 PHI
  • 除非分析供应商已获批准处理 HIPAA 约束的工作负载且数据路径已最小化，否则阻止该设计
  • 尽可能要求进行脱敏处理或采用非 PHI 事件模型

相关技能

  • healthcare-phi-compliance
  • healthcare-reviewer
  • healthcare-emr-patterns
  • healthcare-eval-harness
  • security-review

© affaan-m, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in docs/zh-CN/skills/hipaa-compliance of affaan-m/ECC.

Open the folder on GitHubat commit 4eb71d9

Compare with similar skills

Hipaa Compliance next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Hipaa Compliance compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Hipaa Compliance this skillaffaan-m/ECC276k—~411Automated safety check: PassMIT
HIPAA Safe Harbor Coverage Auditmaziyarpanahi/openmed5.5k—~1.7kAutomated safety check: PassApache-2.0
HIPAA Pre-Deployment Compliance Checkmaziyarpanahi/openmed5.5k—~2kAutomated safety check: PassApache-2.0
Hipaa ComplianceSushegaad/Claude-Skills-Governance-Risk-and-Compliance9461 repos~2.3kAutomated safety check: PassMIT
ISO Standards Readiness EvidenceK-Dense-AI/scientific-agent-skills48k1 repos~4.6kAutomated safety check: NotesMIT
Fda Consultant Specialistdavila7/claude-code-templates33k1 repos~2.7kAutomated safety check: PassMIT

Similar skills

  • HIPAA Safe Harbor Coverage Audit

    maziyarpanahi/openmed

    Checks OpenMed de-identified clinical text against the 18 HIPAA Safe Harbor identifier categories and reports gaps and residual re-identification risk.

    5.5k GitHub stars~1.7k tokensUpdated today
    Legal & ComplianceAuto-check passed

  • HIPAA Pre-Deployment Compliance Check

    maziyarpanahi/openmed

    Walks a data pipeline against the HIPAA Privacy and Security Rule checklist and produces a gap report before it processes patient data.

    5.5k GitHub stars~2k tokensUpdated today
    Legal & ComplianceAuto-check passed

  • Hipaa Compliance

    Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

    Expert HIPAA compliance assistant for healthcare and software contexts.

    946 GitHub starsUsed in 1 repo~2.3k tokens
    Legal & ComplianceAuto-check passed

  • ISO Standards Readiness Evidence

    K-Dense-AI/scientific-agent-skills

    Organizes scope, controlled documents, risk files and traceability into draft evidence for human review against ISO 13485, 14971, 17025 and 15189.

    48k GitHub starsUsed in 1 repo~4.6k tokens
    Legal & ComplianceAuto-check: notes

  • Fda Consultant Specialist

    davila7/claude-code-templates

    Senior FDA consultant and specialist for medical device companies including HIPAA compliance and requirement management.

    33k GitHub starsUsed in 1 repo~2.7k tokens
    Legal & ComplianceAuto-check passed

  • Grc Knowledge

    mlunato47/claude-grc-plugin

    Senior GRC analyst expertise across 18 compliance frameworks — NIST 800-53, FedRAMP (Rev5 + 20x/CR26, KSIs, VDR/VER, Certification Classes A–D), DoD/DoW Impact Levels (IL2–IL6, DISA Cloud SRG), ITAR…

    184 GitHub stars~6.1k tokensUpdated 4 days ago
    Legal & ComplianceAuto-check passed

More from affaan-m/ECC

All 682 skills in this repo

  • Skill Stocktake

    affaan-m/ECC

    Audits your installed Claude skills and commands for quality, with a quick mode for recently changed skills and a full mode that evaluates all of them through subagents.

    277k GitHub starsUsed in 5 repos~3.1k tokens
    Auto-check passed

  • VideoDB Video Search and Editing

    affaan-m/ECC

    Ingests, indexes, searches, edits and monitors video, audio and live streams through the VideoDB Python SDK, returning stream links, clips and timestamps.

    277k GitHub starsUsed in 3 repos~3.5k tokens
    Auto-check: notes

  • Docs Governance

    affaan-m/ECC

    Route broad documentation-governance requests to existing ECC skills and run an opt-in, read-only audit of mapped documentation roles, links, ADR indexes, and evidence references.

    277k GitHub stars~1.1k tokensUpdated today
    Auto-check passed

  • Rules Distillation

    affaan-m/ECC

    Scans installed skills for principles that recur across them and proposes rule-file changes: append, revise, add a section, create a file or leave as covered.

    277k GitHub starsUsed in 2 repos~2.3k tokens
    Auto-check passed

  • Master Agreement Generator

    affaan-m/ECC

    Builds DRAFT counterparty agreements from one markdown template and a small JSON spec per party, with clauses picked by the party's role.

    277k GitHub stars~2.9k tokensUpdated today
    Auto-check passed

  • Frontend Design Direction

    affaan-m/ECC

    Set an ECC-specific frontend design direction for production UI work.

    277k GitHub starsUsed in 1 repo~2.2k tokens
    Auto-check passed

Categories

Questions about Hipaa Compliance

What does Hipaa Compliance do?

针对医疗隐私和安全工作的HIPAA特定入口点。当任务明确围绕HIPAA、PHI处理、受保实体、BAA、违规态势或美国医疗合规要求时使用。. Hipaa Compliance is an agent skill from affaan-m/ECC.

When should I use Hipaa Compliance?

Hipaa Compliance fits situations like: tasks that involve Healthcare and finance regulation.

How do I install Hipaa Compliance in Claude Code?

Run `npx skills add affaan-m/ECC --skill hipaa-compliance -a claude-code`. Or copy the skill folder (docs/zh-CN/skills/hipaa-compliance in affaan-m/ECC) into .claude/skills/hipaa-compliance in your project. Claude Code loads it when a task matches its description.

How do I install Hipaa Compliance in Codex?

Run `npx skills add affaan-m/ECC --skill hipaa-compliance -a codex`. Or copy the skill folder (docs/zh-CN/skills/hipaa-compliance in affaan-m/ECC) into .agents/skills/hipaa-compliance in your project. Codex loads it when a task matches its description.

Can I use Hipaa Compliance in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add affaan-m/ECC --skill hipaa-compliance -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/hipaa-compliance, .gemini/skills/hipaa-compliance, .github/skills/hipaa-compliance and .opencode/skills/hipaa-compliance in your project.

What does Hipaa Compliance need to run?

SKILL.md names no scripts, command-line tools or credentials: Hipaa Compliance is instructions for the agent only.

Does Hipaa Compliance access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Hipaa Compliance safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Hipaa Compliance use?

Hipaa Compliance is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Hipaa Compliance use?

About 411 tokens (SKILL.md is roughly 1.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Hipaa Compliance?

Skills that share tags, products or a category with Hipaa Compliance: HIPAA Safe Harbor Coverage Audit (maziyarpanahi/openmed, 5.5k stars), HIPAA Pre-Deployment Compliance Check (maziyarpanahi/openmed, 5.5k stars), Hipaa Compliance (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 946 stars) and ISO Standards Readiness Evidence (K-Dense-AI/scientific-agent-skills, 48k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Hipaa Compliance?

affaan-m (a GitHub user) maintains it in affaan-m/ECC, which has 276,111 GitHub stars. The repository holds 683 skills in this directory. The repository was last updated on October 10, 2026.

Source: affaan-m/ECC on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.