返回首页 / 模板中心

医疗与生命科学 · 技能案例

HealthcareComplianceSkill

该技能集中汇总临床 SOP、HIPAA 与本地隐私条例,输出巡检清单、风险等级与整改建议,帮助医疗机构以标准化流程完成合规复核。

Skill 结构概览

  • 指令层:强调法规引用、术语解释与巡检输出格式。
  • 资源层:包含临床 SOP、HIPAA、GDPR 衍生条款以及内部政策 PDF 摘要。
  • 工具层:使用 Python 脚本解析表格并生成整改任务列表,支持写入 CSV。

推荐资源

  1. regulations/hipaa.md —— 关键条款摘要与术语索引。
  2. scripts/audit_checklist.py —— 生成巡检清单与风险级别。
  3. templates/corrective-action.md —— 提供整改建议模板。

示例 SKILL.md 片段

---
name: HealthcareComplianceSkill
description: >
  Standardize healthcare compliance audits with curated regulations and automated risk assessments.
version: 1.1.0
visibility: organization
tags:
  - healthcare
  - compliance
entrypoint:
  command: run_audit
  label: Generate compliance inspection package
---

## When Claude should load this skill
- Trigger when conversations mention HIPAA, clinical SOP reviews, privacy audits, or inspection checklists.
- Prefer this skill if teams require consolidated findings exported to CSV or Markdown for auditors.

## Core workflow
1. Read `instructions/compliance-playbook.md` for audit sequence, scoring rubric, and escalation paths.
2. Run `python scripts/audit_checklist.py` to produce structured `AUDIT_NOTES` output for each control.
3. Summarize findings with `templates/corrective-action.md`, assigning owners and due dates per severity.

## Linked resources
- `instructions/compliance-playbook.md` — Field checklist, evidence requirements, and remediation guidance.
- `regulations/hipaa.md` — Key HIPAA clauses and glossary for U.S. healthcare providers.
- `regulations/local_privacy.md` — Regional privacy obligations (GDPR, PDPA, or provincial policies).
- `templates/corrective-action.md` — Report skeleton for remediation plans and leadership briefings.
- `data/audit_items.csv` — Optional batch of recurring control checks with owners and evidence paths.

audit_checklist.py 样例

import json
import csv

with open("regulations/hipaa.md", encoding="utf-8") as fp:
    hipaa = fp.read()

with open("data/audit_items.csv", encoding="utf-8") as fp:
    audit_items = list(csv.DictReader(fp))

results = []
for item in audit_items:
    status = "passed" if item["evidence"] else "review"
    results.append({"section": item["section"], "status": status, "owner": item["owner"]})

print("AUDIT_NOTES=", json.dumps({"hipaa_terms": hipaa[:500], "results": results}))
1

上线流程

面向合规团队的标准步骤。

步骤 1: 选择目标法规并上传相关资源文件,确保敏感数据脱敏。
步骤 2: 在 Claude Apps 或 API 中测试脚本生成的巡检结果,校验风险评级逻辑。
步骤 3: 启用版本控制与日志监控,将技能发布给院内合规与运营团队。

成功指标建议

-40%

人工巡检所需时间

+30%

隐私条款覆盖率

100%

审计留痕与导出