hipaa-validate

Scan code repositories for PHI exposure and HIPAA violations.

161|21|Updated Mar 26, 2026
One-click install
npx skills add https://github.com/softspark/ai-toolkit --skill hipaa-validate
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hipaa-validate
Source: https://github.com/softspark/ai-toolkit/tree/main/app/skills/hipaa-validate
Command: npx skills add https://github.com/softspark/ai-toolkit --skill hipaa-validate

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

PHI exposure, missing audit trails, and improper PHI handling in codebases are a persistent risk for healthcare software. This skill scans source code to identify HIPAA policy violations and risky data handling patterns.

Core Features & Use Cases

  • Detect PHI in logs and outputs, flagging potential data leaks.
  • Identify missing audit logging and potential audit gaps in compliance mode.
  • Flag unencrypted transmission/storage of PHI and weak transport security.
  • Detect hardcoded PHI/test data in PHI-adjacent files.
  • Verify presence of BAAs and vendor references in compliant workflows.
  • Output structured findings suitable for CI pipelines.

Quick Start

Run the hipaa-validate scanner on your project to generate a report of HIPAA findings.

Frequently Asked Questions about hipaa-validate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for HIPAA violations and PHI exposure?

To scan source code for HIPAA violations and PHI exposure, run a heuristic scanner across your full repositories and PHI-adjacent files to identify risky data handling patterns and missing audit trails.

What insecure PHI handling patterns can automated compliance checks detect?

Automated compliance checks can detect PHI in logs and outputs, missing audit logging, unencrypted transmission or storage of PHI, weak transport security, and hardcoded test data in PHI-adjacent files.

Can I integrate HIPAA code scanning into my CI pipeline?

Yes, you can integrate HIPAA code scanning into your CI pipeline by using the scanner's JSON output format, which provides structured findings with file paths, line numbers, severity, and remediation guidance.

Does the scanner work across different programming languages and project structures?

Yes, the scanner applies heuristic scans across full repositories and various project structures to detect HIPAA violations in multiple programming languages without requiring specific framework dependencies.

What details are included in structured PHI security audit findings?

Structured PHI security audit findings include specific file paths, line numbers, severity levels, HIPAA rule citations, and concrete remediation guidance to help developers fix identified compliance violations.

How do I verify BAA and vendor reference presence in compliant healthcare workflows?

To verify BAA and vendor reference presence in compliant workflows, run a code scan that flags missing Business Associate Agreements and vendor references required for HIPAA-compliant data handling operations.