From hipaalint-ai
Scan a project directory for HIPAA compliance violations. Detects PHI exposure, encryption gaps, access control issues, and audit logging gaps. Returns findings grouped by severity with HIPAA citations and remediation guidance.
How this skill is triggered — by the user, by Claude, or both
Slash command
/hipaalint-ai:scanThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Scan the current project for HIPAA compliance violations.
Scan the current project for HIPAA compliance violations.
/hipaalint-ai:scan [path] [--sensitivity balanced]
path — Directory to scan (default: current project root)--sensitivity — Detection sensitivity: strict, balanced (default), relaxedHipaaLint Scan Results
Files scanned: 47 | Rules evaluated: 266
CRITICAL (2)
HIPAA-PHI-001 PHI in Log Statements src/services/patient.ts:45
HIPAA-ENC-001 Unencrypted HTTP Usage src/api/client.ts:12
HIGH (3)
HIPAA-PHI-005 IP Address in Logs src/middleware/logger.ts:23
HIPAA-AC-001 Missing Auth Middleware src/routes/patients.ts:8
HIPAA-ENC-002 Weak Hashing Algorithm src/auth/password.ts:15
Each finding includes the HIPAA citation (e.g., 45 CFR §164.312(e)(1)) and actionable remediation.
Add --fix to auto-remediate simple violations:
/hipaalint-ai:scan [path] --fix --dry-run # preview changes
/hipaalint-ai:scan [path] --fix # apply fixes
This skill invokes the compliance_scan MCP tool.
npx claudepluginhub shivyadavus/hipaalint --plugin hipaalint-aiAudits codebases, configurations, and docs for HIPAA compliance in healthcare apps, checking PHI protection, access controls, encryption, logging, and BAA adherence.
Scans codebases for GDPR compliance issues like consent flows, erasure rights, data transfers, and processing agreements. Generates reports with gaps and remediation recommendations.
Checks code against OWASP Top 10, CWE, NIST, PCI-DSS, HIPAA, GDPR, and secure coding practices. Generates compliance reports with checklists and gap analysis.