skills.rest
ramybarsoum
ramybarsoumCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review-skill

Performs HIPAC-focused security reviews of software features, APIs, and data flows.

Updated Apr 10, 2026
Search Tags:#compliance#threat-modeling#access-control#audit-logging#security-review#hipaa#phi
One-click install
npx skills add https://github.com/ramybarsoum/RStack-V0 --skill security-review-skill-ramybarsoum
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review-skill
Source: https://github.com/ramybarsoum/RStack-V0/tree/main/skill/security-review-skill
Command: npx skills add https://github.com/ramybarsoum/RStack-V0 --skill security-review-skill-ramybarsoum

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps engineering and product teams identify HIPAA and PHI-related security gaps in features, APIs, and data flows before release, reducing compliance risk and costly remediations.

Core Features & Use Cases

  • HIPAA-focused reviews: Evaluates PHI handling, data classification, and storage practices to flag non-compliant flows.
  • Access control & audit logging checks: Reviews authentication, authorization, least-privilege, and logging requirements for sensitive operations.
  • Threat modeling & remediation guidance: Performs STRIDE-style threat analysis and produces actionable mitigation steps and a saved review document.
  • Use Case: Run this Skill on a pull request or technical design to produce a compliance-focused security review saved to work/security-reviews based on repository templates.

Quick Start

Start a guided security review for the tech design located at work/tech-designs/my-design.md.

Frequently Asked Questions about security-review-skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a HIPAA security review on a new software feature?▼

This Skill performs a HIPAA security review by evaluating PHI handling, access control, and audit logging in technical designs or pull requests, generating a documented compliance review.

What is STRIDE threat modeling for PHI data flows?▼

STRIDE threat modeling for PHI identifies compliance gaps in data flows. This Skill applies STRIDE analysis to access control scenarios and generates actionable remediation steps for PHI handling.

How do I check if my API meets HIPAA audit logging requirements?▼

Checking HIPAA audit logging requirements involves reviewing API data flows for sensitive operations. This Skill verifies authentication, authorization, and logging practices against compliance best practices.

Can I use this to review access control and PHI handling in a pull request?▼

Yes, you can review access control and PHI handling in a pull request. The Skill flags non-compliant data flows and saves the compliance review to repository templates.

What do I need to start a compliance-focused security review for my tech design?▼

You need a technical design document, such as a markdown file in your repository, to start a compliance security review. The Skill analyzes the design and saves results to work/security-reviews.

Related Skills

Explore More Legal & Compliance Skills→
sakamoto-family-smilesakamoto-family-smile

hipaa-compliance

Enforces HIPAA privacy and security controls for PHI handling in healthcare software.

Community
Intermediate
DaBigHomieDaBigHomie
1

audit-fix-plan

Audit documents for errors, standards adherence, and security vulnerabilities.

Community
Intermediate
Progery222Progery222

github-workflow-automation

Automate GitHub repository management, CI/CD pipelines, and pull request workflows.

Community
Advanced
fakhriaditiarahmanfakhriaditiarahman
1

security-auditor

Audit application code and infrastructure for security vulnerabilities and compliance.

Community
Advanced