HIPAA Gap Analysis

Assess HIPAA compliance across all five rule areas, identify 32 control gaps, and generate a prioritized remediation plan with compliance scoring and audit r...

This skill appears coherent for doing a HIPAA gap analysis, but before using it: (1) Do not paste identifiable patient data — provide only organization-level, de-identified or high-level information (e.g., 'Medium PHI volume', not sample records). (2) Ask the provider where inputs and outputs are stored, how long they are retained, and who can access them. (3) Confirm whether the environment running the agent is HIPAA-compliant (BAA, encrypted storage, access controls) if you plan to include real PHI. (4) Prefer sanitizing inputs and have a qualified privacy/security professional review any remediation plan before implementation. (5) If you need an audit-grade assessment, consider using an internal/paid external assessor with documented handling policies rather than pasting sensitive details into a general-purpose skill.

Type: OpenClaw Skill Name: toolweb-hipaa-gap-analysis Version: 1.0.0 The skill acts as a wrapper for an external API (portal.toolweb.in) that performs HIPAA gap analysis. It requires the agent to transmit sensitive organizational data, including security control status, PHI types, and workforce details, to a third-party endpoint. While this behavior is aligned with the stated purpose, the transmission of such high-value compliance information to an external domain constitutes a risky capability. No evidence of malicious intent, such as unauthorized data harvesting or hidden execution logic, was found in SKILL.md or _meta.json.