commit c3e6a3504ffbd70423c574fd3a17ebc0705aa8a2 Author: Zhongwei Li Date: Sun Nov 30 08:22:13 2025 +0800 Initial commit diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json new file mode 100644 index 0000000..dde5f8b --- /dev/null +++ b/.claude-plugin/plugin.json @@ -0,0 +1,15 @@ +{ + "name": "hipaa-compliance-checker", + "description": "Check HIPAA compliance", + "version": "1.0.0", + "author": { + "name": "Jeremy Longshore", + "email": "[email protected]" + }, + "skills": [ + "./skills" + ], + "commands": [ + "./commands" + ] +} \ No newline at end of file diff --git a/README.md b/README.md new file mode 100644 index 0000000..3ca4ddc --- /dev/null +++ b/README.md @@ -0,0 +1,3 @@ +# hipaa-compliance-checker + +Check HIPAA compliance diff --git a/commands/check-hipaa.md b/commands/check-hipaa.md new file mode 100644 index 0000000..205880e --- /dev/null +++ b/commands/check-hipaa.md @@ -0,0 +1,8 @@ +--- +description: DESCRIPTION_PLACEHOLDER +shortcut: SHORTCUT_PLACEHOLDER +--- + +# TITLE_PLACEHOLDER + +CONTENT_PLACEHOLDER diff --git a/plugin.lock.json b/plugin.lock.json new file mode 100644 index 0000000..3243959 --- /dev/null +++ b/plugin.lock.json @@ -0,0 +1,61 @@ +{ + "$schema": "internal://schemas/plugin.lock.v1.json", + "pluginId": "gh:jeremylongshore/claude-code-plugins-plus:plugins/security/hipaa-compliance-checker", + "normalized": { + "repo": null, + "ref": "refs/tags/v20251128.0", + "commit": "79522db0ea740e8a3acae7ff1960b8c1c472ae09", + "treeHash": "74d6305a4feeb73f93afcfe4acd6341d068a5206621b09c3a43b07640e9b4a07", + "generatedAt": "2025-11-28T10:18:30.068128Z", + "toolVersion": "publish_plugins.py@0.2.0" + }, + "origin": { + "remote": "git@github.com:zhongweili/42plugin-data.git", + "branch": "master", + "commit": "aa1497ed0949fd50e99e70d6324a29c5b34f9390", + "repoRoot": "/Users/zhongweili/projects/openmind/42plugin-data" + }, + "manifest": { + "name": "hipaa-compliance-checker", + "description": "Check HIPAA compliance", + "version": "1.0.0" + }, + "content": { + "files": [ + { + "path": "README.md", + "sha256": "642b1a4312a3dfc0054d502c787d28082fe9b2842c5f06715a27d89d00eb1c4a" + }, + { + "path": ".claude-plugin/plugin.json", + "sha256": "7d1f9cd2d2ed6aea08257b949962750dfd9fef5095bacf6041ff8428726455f1" + }, + { + "path": "commands/check-hipaa.md", + "sha256": "26981dafecd0bda9d89082c091325c9fdc3ac197318243e952dde0b1a38f4088" + }, + { + "path": "skills/hipaa-compliance-checker/SKILL.md", + "sha256": "082a5554ea5a8c93b09a984435a04944198a5d9b6ae6ddf0ccabdd8defa3ae0a" + }, + { + "path": "skills/hipaa-compliance-checker/references/README.md", + "sha256": "07068560b5faf8fc37a2780822a19a68076af1d06e20d6c0c129d53bdd070275" + }, + { + "path": "skills/hipaa-compliance-checker/scripts/README.md", + "sha256": "94926a78a5aa1cd784c79532f516a31338afcce2a0f95d51a0876877f7305af7" + }, + { + "path": "skills/hipaa-compliance-checker/assets/README.md", + "sha256": "c2cdd5ee5991a8b3c155390a727d46b2850a5088411d1b86d87546b573c40c25" + } + ], + "dirSha256": "74d6305a4feeb73f93afcfe4acd6341d068a5206621b09c3a43b07640e9b4a07" + }, + "security": { + "scannedAt": null, + "scannerVersion": null, + "flags": [] + } +} \ No newline at end of file diff --git a/skills/hipaa-compliance-checker/SKILL.md b/skills/hipaa-compliance-checker/SKILL.md new file mode 100644 index 0000000..9fb1425 --- /dev/null +++ b/skills/hipaa-compliance-checker/SKILL.md @@ -0,0 +1,56 @@ +--- +name: checking-hipaa-compliance +description: | + This skill enables Claude to automatically check for HIPAA (Health Insurance Portability and Accountability Act) compliance issues in codebases, infrastructure configurations, and documentation. It leverages the hipaa-compliance-checker plugin to identify potential violations related to data privacy, security, and access controls. Use this skill when the user explicitly requests to "check HIPAA compliance", "scan for HIPAA violations", "assess HIPAA readiness", or similar phrases related to HIPAA audits and security best practices. It is useful for projects handling protected health information (PHI) and requiring adherence to HIPAA regulations. +allowed-tools: Read, Write, Edit, Grep, Glob, Bash +version: 1.0.0 +--- + +## Overview + +This skill automates the process of identifying potential HIPAA compliance issues within a software project. By using the hipaa-compliance-checker plugin, it helps developers and security professionals proactively address vulnerabilities and ensure adherence to HIPAA guidelines. + +## How It Works + +1. **Analyze Request**: Claude identifies the user's intent to check for HIPAA compliance. +2. **Initiate Plugin**: Claude activates the hipaa-compliance-checker plugin. +3. **Execute Checks**: The plugin scans the specified codebase, configuration files, or documentation for potential HIPAA violations. +4. **Generate Report**: The plugin generates a detailed report outlining identified issues and their potential impact on HIPAA compliance. + +## When to Use This Skill + +This skill activates when you need to: +- Evaluate a codebase for HIPAA compliance before deployment. +- Identify potential HIPAA violations in existing systems. +- Assess the HIPAA readiness of infrastructure configurations. +- Verify that documentation adheres to HIPAA guidelines. + +## Examples + +### Example 1: Checking a codebase for HIPAA compliance + +User request: "Check HIPAA compliance of the patient data API codebase." + +The skill will: +1. Activate the hipaa-compliance-checker plugin. +2. Scan the specified API codebase for potential HIPAA violations. +3. Generate a report listing any identified issues, such as insecure data storage or insufficient access controls. + +### Example 2: Assessing infrastructure configuration for HIPAA readiness + +User request: "Assess the HIPAA readiness of our AWS infrastructure configuration." + +The skill will: +1. Activate the hipaa-compliance-checker plugin. +2. Analyze the AWS infrastructure configuration files for potential HIPAA violations, such as misconfigured security groups or inadequate encryption. +3. Generate a report outlining any identified issues and recommendations for remediation. + +## Best Practices + +- **Specify Target**: Always clearly specify the target (e.g., codebase, configuration file, documentation) for the HIPAA compliance check. +- **Review Reports**: Carefully review the generated reports to understand the identified issues and their potential impact. +- **Prioritize Remediation**: Prioritize the remediation of identified issues based on their severity and potential impact on HIPAA compliance. + +## Integration + +This skill can be integrated with other security and compliance tools to provide a comprehensive view of a system's security posture. The generated reports can be used as input for vulnerability management systems and security information and event management (SIEM) platforms. \ No newline at end of file diff --git a/skills/hipaa-compliance-checker/assets/README.md b/skills/hipaa-compliance-checker/assets/README.md new file mode 100644 index 0000000..5c581a0 --- /dev/null +++ b/skills/hipaa-compliance-checker/assets/README.md @@ -0,0 +1,8 @@ +# Assets + +Bundled resources for hipaa-compliance-checker skill + +- [ ] report_template.docx: A template for generating HIPAA compliance reports in DOCX format. +- [ ] config_template.yaml: A template for configuration files used by the HIPAA compliance checker. +- [ ] example_code_compliant.py: Example code demonstrating HIPAA-compliant coding practices. +- [ ] example_code_non_compliant.py: Example code demonstrating non-HIPAA-compliant coding practices. diff --git a/skills/hipaa-compliance-checker/references/README.md b/skills/hipaa-compliance-checker/references/README.md new file mode 100644 index 0000000..b933d4b --- /dev/null +++ b/skills/hipaa-compliance-checker/references/README.md @@ -0,0 +1,10 @@ +# References + +Bundled resources for hipaa-compliance-checker skill + +- [ ] hipaa_overview.md: A detailed overview of HIPAA regulations and their implications for software development. +- [ ] hipaa_technical_safeguards.md: A guide to implementing technical safeguards as required by HIPAA. +- [ ] hipaa_administrative_safeguards.md: A guide to implementing administrative safeguards as required by HIPAA. +- [ ] hipaa_physical_safeguards.md: A guide to implementing physical safeguards as required by HIPAA. +- [ ] sample_hipaa_policy.md: A sample HIPAA compliance policy document. +- [ ] api_documentation.md: API documentation for the hipaa-compliance-checker plugin. diff --git a/skills/hipaa-compliance-checker/scripts/README.md b/skills/hipaa-compliance-checker/scripts/README.md new file mode 100644 index 0000000..36d1115 --- /dev/null +++ b/skills/hipaa-compliance-checker/scripts/README.md @@ -0,0 +1,7 @@ +# Scripts + +Bundled resources for hipaa-compliance-checker skill + +- [ ] hipaa_scan.py: Script to execute the HIPAA compliance checker and format the results. +- [ ] config_validator.py: Script to validate configuration files against HIPAA requirements. +- [ ] report_generator.py: Script to generate detailed compliance reports in various formats (e.g., PDF, CSV).