Skill UI

Automates HIPAA compliance checks across codebases, infrastructure configurations, and documentation by leveraging the hipaa-compliance-checker plugin to flag privacy, security, and access-control risks for projects handling PHI.

Evaluates infrastructure setups against SOC2, HIPAA, and PCI-DSS, highlights violations, and recommends fixes when users request compliance checks or audit reports.

This framework provides comprehensive compliance and security auditing for Cursor IDE usage. It covers major regulations like SOC 2, GDPR, and HIPAA, guiding users through detailed checklists, evidence collection, and remediation steps. It is essential for enterprise teams requiring robust data governance and adherence to strict industry standards.

A comprehensive guide to configuring Cursor's privacy features. This documentation covers enabling Privacy Mode for zero data retention, managing data flow from chat and indexing, implementing sensitive file exclusion using .cursorignore, and understanding telemetry settings. It also provides compliance mapping for GDPR, HIPAA, and SOC 2 compliance.

This skill provides expert guidance for modern, multi-cloud database administration. It covers comprehensive knowledge across AWS, Azure, and GCP platforms, spanning relational, NoSQL, and graph databases. Key areas include Infrastructure as Code (Terraform, Flyway), achieving high availability, disaster recovery, advanced performance optimization, and ensuring strict regulatory compliance (HIPAA, GDPR). It is essential for managing complex, highly reliable cloud data architectures.

Implements best practices for secure audio transcription using Deepgram. This guide covers PII redaction (built-in and custom patterns), secure audio upload to S3 with encryption, managing data retention policies, and ensuring compliance with major regulations like GDPR and HIPAA. It provides a comprehensive pipeline for handling sensitive audio data in enterprise applications.

Automates HIPAA audit helper workflows within Security Advanced, offering guided best practices, production-ready configurations, and compliance validation for penetration testing and threat modeling scenarios.

This guide provides essential security best practices for implementing Langfuse, an LLM observability platform. It covers critical areas such as secure credential management (public vs. secret keys), implementing PII scrubbing techniques before tracing, hardening self-hosted environments, and enforcing the principle of least privilege. Use this guide to ensure your LLM integrations meet strict data privacy standards (e.g., GDPR, HIPAA).

This comprehensive checklist guides the deployment of AI agents into a live production environment. It covers critical areas including security best practices (API key management, SSO), robust error handling, monitoring setup, operational runbooks, and compliance adherence (HIPAA, GDPR). Use this when validating an agent for go-live to ensure maximum reliability and stability.

This comprehensive guide defines the secure data lifecycle management for OpenEvidence, an AI-powered platform for clinical evidence synthesis. It outlines data classification (e.g., clinical queries, patient responses), strict adherence to global regulations (HIPAA, GDPR, FDA), and technical requirements for handling Protected Health Information (PHI). Key processes include PHI de-identification, data validation, secure API integration, and compliant data export, ensuring the system maintains the highest level of patient privacy and regulatory compliance.

This skill provides a complete guide to deploying a containerized OpenEvidence clinical evidence integration service using Docker. It establishes a HIPAA-conscious production environment, enabling secure connections to the OpenEvidence API. Users can query clinical evidence, retrieve summarized medical literature, and validate treatment recommendations, all while maintaining audit logging and data-at-rest encryption compliance. Includes setup for health checks and rolling updates.

This guide outlines the strict multi-environment setup for the OpenEvidence clinical AI system, crucial for maintaining HIPAA compliance. It details how to configure and validate separate environments (Development, Staging, Production) to manage different data classifications—synthetic, de-identified, and full PHI. The process emphasizes environment validation checks, BAA adherence, and robust audit logging to prevent regulatory violations and PHI exposure.