Scan

Scan a project directory for HIPAA compliance violations. Detects PHI exposure, encryption gaps, access control issues, and audit logging gaps. Returns findings grouped by severity with HIPAA citations and remediation guidance.From its SKILL.md

Install

npx -y skills add shivyadavus/hipaalint --skill scan

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.8 KB, as published. Nobody here has run it

/scan

Scan the current project for HIPAA compliance violations.

Usage

/hipaalint-ai:scan [path] [--sensitivity balanced]

Parameters

path — Directory to scan (default: current project root)
--sensitivity — Detection sensitivity: strict, balanced (default), relaxed

What It Does

Scans all source files for PHI exposure patterns
Evaluates code against 266 rules across HIPAA, HITRUST CSF, and SOC 2 Health
Checks encryption, access control, audit logging, and infrastructure
Returns findings grouped by severity (critical, high, medium, low)

Example Output

HipaaLint Scan Results
Files scanned: 47  |  Rules evaluated: 266

CRITICAL (2)
  HIPAA-PHI-001  PHI in Log Statements     src/services/patient.ts:45
  HIPAA-ENC-001  Unencrypted HTTP Usage     src/api/client.ts:12

HIGH (3)
  HIPAA-PHI-005  IP Address in Logs         src/middleware/logger.ts:23
  HIPAA-AC-001   Missing Auth Middleware    src/routes/patients.ts:8
  HIPAA-ENC-002  Weak Hashing Algorithm     src/auth/password.ts:15

Each finding includes the HIPAA citation (e.g., 45 CFR §164.312(e)(1)) and actionable remediation.

Auto-Fix

Add --fix to auto-remediate simple violations:

/hipaalint-ai:scan [path] --fix --dry-run   # preview changes
/hipaalint-ai:scan [path] --fix             # apply fixes

MCP Tool

This skill invokes the compliance_scan MCP tool.