hipaa-compliance-guard

Audit HealthTech infrastructure for HIPAA Security Rule safeguards on ePHI.

2|1|Updated Jan 25, 2026

Search Tags:#compliance #cloud #infrastructure-as-code #security-audit #audit-logging #hipaa #ePHI

Ready to run

npx skills add https://github.com/jorgealves/agent_skills --skill hipaa-compliance-guard

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hipaa-compliance-guard
Source: https://github.com/jorgealves/agent_skills/tree/main/hipaa-compliance-guard
Command: npx skills add https://github.com/jorgealves/agent_skills --skill hipaa-compliance-guard

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits HealthTech applications for HIPAA technical safeguards to ensure ePHI is protected and compliant with the Security Rule.

Core Features & Use Cases

Infrastructure quality checks: Scans cloud and on-prem configurations to verify encryption, access controls, and audit logging.
PHI risk identification: Identifies potential PHI exposure points in IaC and deployment configurations.
Use Case: Example: During architecture reviews, run the guard to highlight encryption gaps and logging omissions before deployment.

Quick Start

Use the hipaa-compliance-guard to audit your infrastructure by supplying project_root and cloud_provider. Example: project_root: "./infra" and cloud_provider: "aws".

Frequently Asked Questions about hipaa-compliance-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my Terraform infrastructure for HIPAA Security Rule compliance?▼

To audit Terraform infrastructure for HIPAA compliance, provide your project root directory and cloud provider. The guard scans your IaC configurations to verify encryption, access controls, and audit logging safeguards for ePHI without accessing PHI data.

Can I check CloudFormation templates for ePHI exposure before a deployment?▼

Yes, you can check CloudFormation templates for ePHI exposure. The guard identifies potential PHI entry points and validates configurations by scanning IaC during architecture reviews to highlight encryption gaps and logging omissions before deployment.

Does the HIPAA compliance guard work with AWS cloud provider configurations?▼

Yes, the HIPAA compliance guard works with AWS cloud provider configurations. You supply the project root and cloud provider, and it scans your infrastructure to verify HIPAA Security Rule safeguards like encryption, logging, and access controls.

What is the best way to perform a pre-audit self-assessment for HealthTech infrastructure?▼

The best way to perform a pre-audit self-assessment for HealthTech infrastructure is to run the guard against your IaC. It validates configurations by verifying encryption, logging, and access controls to ensure ePHI is protected and compliant with the Security Rule.

Does auditing infrastructure for HIPAA safeguards require accessing PHI data?▼

Auditing infrastructure for HIPAA safeguards does not require accessing PHI data. The guard validates configurations by scanning IaC and confirming audit-logging presence to verify technical safeguards, ensuring ePHI remains secure and untouched during the review.

How do I identify PHI entry points in my infrastructure-as-code?▼

To identify PHI entry points in infrastructure-as-code, run the guard against your project root. It scans IaC and deployment configurations to pinpoint potential PHI exposure points and confirm that necessary technical safeguards are implemented.