HIPAA Compliance for AI Agents
请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。
SkillHub CLI
skillhub install 1kalin/afrexai-hipaa-compliance打开来源仓库，查看说明和兼容环境后，按来源提供的命令或步骤安装。
将来源链接提供给你的 Agent，让它先读取说明、核对依赖，并向你说明将执行的安装步骤。
Generate HIPAA compliance checklists, risk assessments, and audit frameworks for healthcare organizations deploying AI agents.
When activated, produce any of these deliverables based on user request:
Access Controls:
Audit Controls:
Transmission Security:
| Risk | Impact | Mitigation |
|---|---|---|
| Prompt injection → PHI leak | Critical | Input sanitization, output filtering, sandboxing |
| Model training on PHI | High | BAA prohibition, single-tenant deployment |
| Hallucinated medical info | Critical | Human-in-loop, confidence thresholds |
| Shadow AI with PHI | High | Approved tool registry, DLP rules |
Rate each AI deployment:
这些信息来自收录时的来源分析，可能滞后；使用前请核对最新来源文件。
Generate HIPAA compliance frameworks for healthcare organizations deploying AI automation.
Covers 45 CFR 164 technical/administrative safeguards, AI-specific risks (prompt injection, PHI in training data, hallucination), breach response timelines, and penalty reference tables.
Built for compliance officers, CISOs, and healthcare IT teams rolling out AI agents in 2026.
© 2026 AfrexAI
# HIPAA Compliance for AI Agents Generate HIPAA compliance checklists, risk assessments, and audit frameworks for healthcare organizations deploying AI agents. ## What This Skill Does When activated, produce any of these deliverables based on user request: ### 1. Pre-Deployment Compliance Gate - BAA requirements checklist for AI vendors - PHI data flow mapping template - Minimum Necessary standard application guide - Risk assessment framework (45 CFR 164.308(a)(1)) ### 2. Technical Safeguards (45 CFR 164.312) **Access Controls:** - Unique service account IDs for AI agents - Emergency access procedures for system failures - 15-minute auto-logoff configuration - Role-based minimum necessary permissions **Audit Controls:** - PHI access logging (timestamp, user, action, data) - 6-year retention compliance - Anomaly detection on access patterns - AI decision audit trails **Transmission Security:** - TLS 1.3 enforcement - E2E encryption for patient comms - Certificate pinning for API connections - No PHI in URLs, query strings, or logs ### 3. AI-Specific Risk Matrix | Risk | Impact | Mitigation | |------|--------|------------| | Prompt injection → PHI leak | Critical | Input sanitization, output filtering, sandboxing | | Model training on PHI | High | BAA prohibition, single-tenant deployment | | Hallucinated medical info | Critical | Human-in-loop, confidence thresholds | | Shadow AI with PHI | High | Approved tool registry, DLP rules | ### 4. Breach Response Timeline - 0-1 hrs: Contain (disable agent, preserve logs) - 1-24 hrs: Assess scope of PHI exposure - 24-48 hrs: Document root cause, affected individuals - Within 60 days: Notify HHS + individuals + media (if 500+) - 30-90 days: Remediate, patch, retrain ### 5. Compliance by Use Case Rate each AI deployment: - Patient scheduling → Medium risk - Billing/coding → High risk - Clinical decision support → Critical risk - Patient communication → High risk - Medical records summarization → Critical risk ### 6....
# HIPAA Compliance for AI Agents Generate HIPAA compliance frameworks for healthcare organizations deploying AI automation. Covers 45 CFR 164 technical/administrative safeguards, AI-specific risks (prompt injection, PHI in training data, hallucination), breach response timelines, and penalty reference tables. Built for compliance officers, CISOs, and healthcare IT teams rolling out AI agents in 2026. ## What You Get - Pre-deployment compliance gate (7-point checklist) - Technical safeguards audit (access, audit, transmission, integrity) - AI-specific risk matrix with mitigations - Breach response timeline (0 hrs → 90 days) - Use case risk ratings (scheduling through clinical decision support) - Penalty reference with 2025 fine amounts ## Links - [Healthcare AI Context Pack — $47](https://afrexai-cto.github.io/context-packs/) - [AI Revenue Leak Calculator](https://afrexai-cto.github.io/ai-revenue-calculator/) - [AI Agent Setup Wizard](https://afrexai-cto.github.io/agent-setup/) *© 2026 AfrexAI*
Bambu Lab 3D printer control and automation. Activate when user mentions: printer status, 3D printing, slice, analyze model, generate 3D, AMS filament, print monitor, Bambu Lab, or any 3D printing task. Full pi...
Generative Engine Optimization (GEO) for AI search visibility. Optimize content to appear in ChatGPT, Perplexity, Claude, and Google AI Overviews. Use when optimizing websites, pages, or content for LLM discove...
Agents can sign plugins, rotate credentials without losing identity, and publicly attest to behavior.
Send and receive P2P messages using disposable numbers and PINs. No servers, no accounts. Use for human notifications, approval flows, and agent-to-agent communication.