医疗与生命科学 · 技能案例
HealthcareComplianceSkill
该技能集中汇总临床 SOP、HIPAA 与本地隐私条例,输出巡检清单、风险等级与整改建议,帮助医疗机构以标准化流程完成合规复核。
Skill 结构概览
- 指令层:强调法规引用、术语解释与巡检输出格式。
- 资源层:包含临床 SOP、HIPAA、GDPR 衍生条款以及内部政策 PDF 摘要。
- 工具层:使用 Python 脚本解析表格并生成整改任务列表,支持写入 CSV。
推荐资源
- regulations/hipaa.md —— 关键条款摘要与术语索引。
- scripts/audit_checklist.py —— 生成巡检清单与风险级别。
- templates/corrective-action.md —— 提供整改建议模板。
示例 SKILL.md 片段
---
name: HealthcareComplianceSkill
description: >
Standardize healthcare compliance audits with curated regulations and automated risk assessments.
version: 1.1.0
visibility: organization
tags:
- healthcare
- compliance
entrypoint:
command: run_audit
label: Generate compliance inspection package
---
## When Claude should load this skill
- Trigger when conversations mention HIPAA, clinical SOP reviews, privacy audits, or inspection checklists.
- Prefer this skill if teams require consolidated findings exported to CSV or Markdown for auditors.
## Core workflow
1. Read `instructions/compliance-playbook.md` for audit sequence, scoring rubric, and escalation paths.
2. Run `python scripts/audit_checklist.py` to produce structured `AUDIT_NOTES` output for each control.
3. Summarize findings with `templates/corrective-action.md`, assigning owners and due dates per severity.
## Linked resources
- `instructions/compliance-playbook.md` — Field checklist, evidence requirements, and remediation guidance.
- `regulations/hipaa.md` — Key HIPAA clauses and glossary for U.S. healthcare providers.
- `regulations/local_privacy.md` — Regional privacy obligations (GDPR, PDPA, or provincial policies).
- `templates/corrective-action.md` — Report skeleton for remediation plans and leadership briefings.
- `data/audit_items.csv` — Optional batch of recurring control checks with owners and evidence paths.
audit_checklist.py 样例
import json
import csv
with open("regulations/hipaa.md", encoding="utf-8") as fp:
hipaa = fp.read()
with open("data/audit_items.csv", encoding="utf-8") as fp:
audit_items = list(csv.DictReader(fp))
results = []
for item in audit_items:
status = "passed" if item["evidence"] else "review"
results.append({"section": item["section"], "status": status, "owner": item["owner"]})
print("AUDIT_NOTES=", json.dumps({"hipaa_terms": hipaa[:500], "results": results}))
1
上线流程
面向合规团队的标准步骤。
步骤 1: 选择目标法规并上传相关资源文件,确保敏感数据脱敏。
步骤 2: 在 Claude Apps 或 API 中测试脚本生成的巡检结果,校验风险评级逻辑。
步骤 3: 启用版本控制与日志监控,将技能发布给院内合规与运营团队。
成功指标建议
-40%
人工巡检所需时间
+30%
隐私条款覆盖率
100%
审计留痕与导出