HIPAA Compliance Checker Skill

HIPAA compliance scanning automates detection of violations across your codebase and databases by checking for PHI logging in console statements, missing Row-Level Security policies, unencrypted PHI fields, incomplete audit logging, and exposed secrets. Run the full scan to generate a detailed report of all violations and warnings suitable for SOC2 and HIPAA audits.

This Skill validates PHI logging prevention, Row-Level Security enablement on database tables, encryption of PHI fields, audit logging coverage, and secret scanning for hardcoded credentials. It covers codebases and databases handling Protected Health Information with standardized output for compliance audits.

Yes. Integrate the compliance checker into pre-commit hooks for automated enforcement, run it weekly as part of security reviews, or execute it before critical demos and SOC2 audits to validate readiness and identify violations before they reach production.

HIPAA compliance checking covers the full scope: PHI logging detection, RLS policies, encryption validation, and audit logging. Secret scanning is one component that identifies hardcoded credentials and exposed API keys; this Skill combines all checks into a unified compliance assessment.

The Skill scans both code and databases for violations. It performs repository searches for PHI logging patterns, reviews migrations, validates RLS policies on database tables, and checks encryption—requiring access to the codebase and database schema to complete all checks.