# Hipaa Readiness Audit

> Your BAA is a contract, not a risk analysis — and the risk analysis is what OCR cites.

- Skill: `rikocr8orh8/hipaa-readiness-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add rikocr8orh8/hipaa-readiness-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/rikocr8orh8/hipaa-readiness-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: rikocr8orh8 (https://skillmd.com/u/rikocr8orh8)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/rikocr8orh8/hipaa-readiness-audit

---


# HIPAA-Readiness Codebase Audit — $48

Your BAA is a contract, not a risk analysis — and the risk analysis is what OCR cites. This skill maps every finding to its statutory citation, frames it as a threat to ePHI, and enumerates which vendors need a BAA, including the AI provider in your prompt path. Never claims 'HIPAA certified,' because no such thing exists.

**This is a preview.** The full skill (method, Iron Rules, dated snapshots, worked examples) is available on Agensi:
[agensi.io/skills/hipaa-readiness-audit](https://www.agensi.io/skills/hipaa-readiness-audit)