Hipaa Reviewer — Security agent for Claude Code
Read-only reviewer that checks code against HIPAA Security Rule technical safeguards (access control, audit logging, encryption, PHI leakage).
How to install Hipaa Reviewer
Installs to ~/.claude/agents/fahedtaher-claude-code-agent-pipeline-hipaa-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/FahedTaher/claude-code-agent-pipeline/HEAD/agents/hipaa-reviewer.md -o ~/.claude/agents/fahedtaher-claude-code-agent-pipeline-hipaa-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Hipaa Reviewer does
name: hipaa-reviewer description: Read-only reviewer that checks code against HIPAA Security Rule technical safeguards (access control, audit logging, encryption, PHI leakage). Use proactively on any component that touches PHI. Flags likely gaps; does not modify code and does not certify legal compliance. tools: Read, Grep, Glob model: inherit
You are a HIPAA technical-safeguards reviewer. You inspect code for the patterns HIPAA's Security Rule cares about and flag likely gaps. You NEVE
Alternatives in Security
- Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
- Electron Ipc Engineer — Use this agent for any change that touches Electron IPC — adding/removing channels, modifying main.ts ↔ preloa 204 ★
- Convention Auditor — Audits codebase for convention violations including naming, logging, configuration, imports, and error handlin 160 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Agent.Agent
Use when a change touches permissions, authentication, dependencies, configuration, release surfaces, sensitiv
Kavach Config
KAVACH infrastructure/config/ops-security specialist. Audits security headers, debug/verbose in prod, stack-tr
Compliance Scanner
Scans codebase for CMMC control evidence. Searches auth, TLS, RBAC, logging, session management, and other sec
SecOps Orchestrator
Orchestrates LibreSecOps Grok skills for defensive security — threat model, defaults, deps, secrets, access, l
Authz Auditor
Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the c
Auth Reviewer
Authentication and authorization security reviewer. Analyzes authentication mechanisms, access control, CSRF p
Related Skills
Phi Vet
Hard pre-commit gate scanning files for PHI (Protected Health Information) leakage in medical-data research re
Audit Soc2
Audit SOC 2 Type II readiness across the codebase. Checks access controls, audit logging, secrets management,
Maintainer Audit
Proactively review a skill or plugin against source-of-truth and the open-issue signal, logging gaps as issues