HIPAA Compliance Use this as the HIPAA-specific entrypoint when a task is clearly about US healthcare compliance. This skill intentionally stays thin and canonical: - remains the primary implementation skill for PHI/PII handling, data classification, audit logging, encryption, and leak prevention. - remains the specialized reviewer when code, architecture, or product behavior needs a healthcare-aware second pass. - still applies for general auth, input-handling, secrets, API, and deployment hardening. When to Use - The request explicitly mentions HIPAA, PHI, covered entities, business associa…