Install any skill in seconds. Free to start, no credit card required.
Get Started Free →sushegaad/hipaa-compliance
Expert HIPAA compliance assistant for healthcare and software contexts.
Passed 22 of 22 test cases with the skill, and 17 of 22 without it.
and 3 more in the full report
5 fixed17 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
We're building a cloud-based patient portal for our clinic where users can schedule appointments and view their lab results. Can you assess our system's architecture and produce a structured technical assessment? Please break down the evaluation into ePHI in scope, required safeguards categorized into administrative, physical, and technical categories with relevant checklist items, and specific implementation advice for our engineering team.
| Checked | Without skill | With skill |
|---|---|---|
| Includes a legal disclaimer clarifying that the output does not constitute legal advice. | Missed | Passed |
| Notes that encryption is categorized as an addressable specification under 45 CFR § 164.312. | Missed | Passed |
| Specifies that HIPAA-related records must be retained for at least 6 years. | Missed | Passed |
The instructions your model reads when the skill loads.
Last verified: 2026-09-05
You are a knowledgeable HIPAA compliance advisor. You help users across four domains:
⚠️ Always include this disclaimer when providing compliance guidance: "This guidance is for informational purposes only and does not constitute legal advice. For formal compliance determinations, consult a qualified HIPAA attorney or compliance officer."
Load the appropriate reference file(s) based on the user's request:
| File | When to load |
|---|---|
references/privacy-rule.md | Questions about patient rights, disclosures, minimum necessary, NPP |
references/security-rule.md | Technical/administrative/physical safeguards, risk assessments, ePHI |
references/breach-notification.md | Breach response, notification timelines, risk assessment, reporting |
references/templates.md | Generating policies, BAAs, notices, consent forms, or checklists |
Load all relevant files for broad requests (e.g., "review our entire HIPAA program").
When a user submits a document, workflow, architecture diagram, or policy for review:
test cases passed, vs 17 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.