hipaa-guardian

Scan code, data files, and logs for PHI and PII.

7|3|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/1Mangesh1/hipaa-guardian --skill hipaa-guardian
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hipaa-guardian
Source: https://github.com/1Mangesh1/hipaa-guardian/tree/main/skills/hipaa-guardian
Command: npx skills add https://github.com/1Mangesh1/hipaa-guardian --skill hipaa-guardian

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the detection of Protected Health Information (PHI) and Personally Identifiable Information (PII) within codebases, data files, and logs, ensuring compliance with HIPAA regulations and enhancing data security.

Core Features & Use Cases

  • PHI/PII Detection: Scans for all 18 HIPAA Safe Harbor identifiers across various file types.
  • Code Security: Identifies hardcoded PHI, insecure logging, and missing authentication gates in code.
  • Compliance Auditing: Generates reports mapping findings to HIPAA rules and provides remediation guidance.
  • Use Case: Automatically scan your entire codebase for any instances of hardcoded SSNs, patient names in logs, or API endpoints accessing PHI without proper authentication, generating a compliance report.

Quick Start

Use the hipaa-guardian skill to scan the current directory for any PHI.

Frequently Asked Questions about hipaa-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded Protected Health Information?

To scan for hardcoded Protected Health Information (PHI), you can run a tool that checks code, data files, and logs using predefined patterns. It identifies hardcoded PHI, insecure logging practices, and missing authentication gates across your codebase.

What are the 18 HIPAA Safe Harbor identifiers and how are they detected in code?

The 18 HIPAA Safe Harbor identifiers include specific Personally Identifiable Information (PII) elements. Detection tools scan your codebase using predefined patterns and context analysis to locate these identifiers across various file types.

How do I generate a compliance report mapping insecure code to HIPAA rules?

Generating a HIPAA compliance report involves scanning for PHI and insecure coding practices. The process outputs detailed reports mapping findings to specific HIPAA rules and provides actionable remediation steps to resolve the identified security gaps.

Do I need Python to run automated PHI and PII detection scripts?

Yes, you need Python installed to run automated PHI and PII detection scripts. The scanning process relies on Python scripts to execute pattern matching, context analysis, and compliance report generation.

What is the best way to check for missing authentication on API endpoints accessing PHI?

The best way to check for missing authentication on PHI endpoints is using an automated code scanner. It analyzes your code to identify API endpoints accessing Protected Health Information without proper authentication gates.