Skill UI

This guide outlines the strict multi-environment setup for the OpenEvidence clinical AI system, crucial for maintaining HIPAA compliance. It details how to configure and validate separate environments (Development, Staging, Production) to manage different data classifications—synthetic, de-identified, and full PHI. The process emphasizes environment validation checks, BAA adherence, and robust audit logging to prevent regulatory violations and PHI exposure.

Provides comprehensive observability for OpenEvidence, a system delivering critical clinical evidence queries. It monitors key metrics such as query response latency (p95), evidence freshness, citation accuracy, and compliance audit logs (HIPAA). Essential for ensuring timely, accurate, and regulatory-compliant patient care information retrieval.

This comprehensive checklist guides the secure and compliant deployment of OpenEvidence, a clinical decision support system. It covers critical requirements for handling Protected Health Information (PHI), including HIPAA-grade security, robust API integration best practices, mandatory monitoring setup, and resilience testing. Use this guide to ensure your healthcare-adjacent system meets the highest standards of compliance and reliability.

This comprehensive reference architecture guides the integration of OpenEvidence into clinical decision support systems (CDS). It is designed for healthcare platforms needing evidence-based query processing, deterministic citation tracking, and full audit logging. Key considerations include HIPAA compliance, optimizing for sub-second response times in point-of-care workflows, and establishing robust data models and event pipelines.

This guide provides essential security protocols and coding best practices for integrating with OpenEvidence, a platform processing Protected Health Information (PHI). It covers mandatory topics such as HIPAA compliance, API key management, webhook signature verification, input validation, and data redaction, ensuring all interactions are secure and audit-compliant.

A comprehensive guide for auditing and ensuring regulatory compliance (SOC2, GDPR, HIPAA) when integrating Large Language Models (LLMs) via OpenRouter. It covers best practices for data handling, access control, PII redaction, implementing robust audit trails, and configuring provider routing to maintain data sovereignty and meet strict industry standards.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

This expert simulates a compliance expert, specializing in regulatory requirements for software systems, including GDPR, HIPAA, SOC2, and PCI-DSS. It performs comprehensive audits, identifies compliance gaps, and generates actionable implementation plans, technical controls, and policy templates to ensure adherence to industry standards.

Provides a Senior SecOps engineer toolkit for running SAST/DAST, dependency CVE scans, policy checks, and compliance automation (SOC2/PCI-DSS/HIPAA/GDPR) during audits, CVE response, or CI/CD hardening.

Configure GDPR-compliant data handling, PII scrubbing, and data retention policies within Sentry. This skill provides detailed instructions on implementing client-side `beforeSend` hooks and server-side scrubbing rules to securely redact sensitive data (passwords, emails, IP addresses, CC numbers). Essential for achieving compliance with regulations like GDPR, HIPAA, and meeting SOC 2 audit controls.

This framework enforces organizational governance and policy guardrails for Sentry usage. It standardizes configuration across services, mandatorily scrubbing PII, enforcing naming conventions, and managing trace rate caps based on service criticality. It integrates into CI/CD to prevent compliance drift and ensure adherence to standards like GDPR and HIPAA.

Orchestrates TripAdvisor API tasks via Rube MCP, guiding tool discovery, connection checks, execution sequences, and memory-aware workflows so schema-driven automation stays consistent.