Our review
Scans code and data for Protected Health Information (PHI) to ensure HIPAA compliance.
Strengths
- Comprehensive detection of all 18 HIPAA identifiers
- Verifies encryption and access controls
- Structured report with file location and PHI type
Limitations
- May produce false positives on non-medical data
- Does not automatically remediate findings
- Requires basic HIPAA knowledge to interpret
When reviewing code or datasets that contain patient health information or medical records.
For non-health related data or when HIPAA compliance is not a concern.
Security analysis
SafeThe skill is a static checklist for PHI identification in code review; it does not invoke any tools, execute code, or perform network operations. It presents no execution risk.
No concerns found
Examples
Scan my project directory for any Protected Health Information (PHI) in source files, configuration files, and test data. List all findings with file path and identifier type.Review the log files in ./logs/ for potential PHI exposure, especially patient names, SSNs, or medical record numbers.Audit this healthcare application for HIPAA compliance: check for PHI hardcoding, encryption at rest and in transit, and access controls in the codebase.name: phi-checker description: Scans code and data for Protected Health Information (PHI) to ensure HIPAA compliance. Use when reviewing code that handles patient data, healthcare records, or medical information.
PHI Compliance Checker
Instructions
When checking for PHI, scan for these 18 HIPAA identifiers:
- Names
- Geographic data (addresses, zip codes)
- Dates (birth, admission, discharge, death)
- Phone numbers
- Fax numbers
- Email addresses
- Social Security numbers
- Medical record numbers
- Health plan beneficiary numbers
- Account numbers
- Certificate/license numbers
- Vehicle identifiers and serial numbers
- Device identifiers and serial numbers
- Web URLs
- IP addresses
- Biometric identifiers
- Full-face photographs
- Any other unique identifying number or code
Review Process
- Scan all files for hardcoded PHI
- Check logs for potential PHI exposure
- Verify PHI is encrypted at rest and in transit
- Ensure proper access controls exist
- Flag any PHI in comments, test data, or configuration files
Report Format
List each finding with file location, PHI type, and remediation recommendation.
Security Audit Scanner
Security
Analyzes code to detect OWASP Top 10 vulnerabilities.
OWASP Security Checklist
Security
Generates application security checklists based on the OWASP Top 10.
Threat Model Generator
Security
Generates threat model documents with STRIDE analysis.