CtrlK
BlogDocsLog inGet started
Tessl Logo

testland/hipaa-test-patterns

Reference catalog of HIPAA Security Rule-aligned test patterns - administrative safeguards (45 CFR §164.308: workforce training, access management, contingency planning), physical safeguards (§164.310: facility access, workstation security, device disposal), technical safeguards (§164.312: access control, audit logs, integrity, transmission security); PHI handling assertions in fixtures; minimum-necessary tests per §164.502(b); BAA-scope boundary verification. Use when authoring HIPAA-readiness tests for any product handling Protected Health Information.

75

Quality

94%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Overview
Quality
Evals
Security
Files

Quality

Content

100%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is tight, actionable, and well-structured, with a clear workflow, a worked example demonstrating a feedback loop, and proper progressive disclosure into one real reference file. No meaningful weaknesses to address.

DimensionReasoningScore

Conciseness

The body is lean and well-organized; the 18 Safe Harbor identifier list is hard-to-recall reference data rather than generic concept padding, and every section earns its place.

3 / 3

Actionability

A concrete 7-step 'How to use' workflow names specific tools (synthetic-pii-generator, audit-trail-test-author) and points to copy-ready, executable pytest patterns in the reference file.

3 / 3

Workflow Clarity

Steps are explicitly sequenced and the worked example demonstrates a fail→narrow-serializer→rerun→pass feedback loop, providing clear checkpoints for a test-authoring task.

3 / 3

Progressive Disclosure

The SKILL.md is an overview that defers full per-section patterns to a single one-level-deep, clearly signaled reference (references/security-rule-test-patterns.md, verified present) with well-organized sections.

3 / 3

Total

12

/

12

Passed

Description

85%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, highly specific description with an explicit 'Use when' trigger and a well-defined niche. It is slightly heavy on regulatory citation jargon and could surface more colloquial trigger phrasing.

Suggestions

Add everyday phrasing to the trigger clause (e.g., 'HIPAA compliance tests', 'PHI test coverage') so users searching with non-citation vocabulary match this skill.

Trim the in-line CFR citation list slightly so the natural trigger terms read more prominently.

DimensionReasoningScore

Specificity

Enumerates concrete actions across safeguard categories ('workforce training, access management', 'audit logs, integrity, transmission security', 'BAA-scope boundary verification'), matching the 'lists multiple specific concrete actions' anchor.

3 / 3

Completeness

Clearly states what it is ('Reference catalog of HIPAA Security Rule-aligned test patterns') and gives an explicit 'Use when authoring HIPAA-readiness tests for any product handling Protected Health Information.', answering both what and when.

3 / 3

Trigger Term Quality

Natural terms like 'HIPAA', 'HIPAA-readiness tests', and 'Protected Health Information' appear, but the bulk is CFR-citation jargon (§164.308/310/312) and common variations like 'HIPAA compliance tests' are missing, fitting 'some relevant keywords but missing common variations'.

2 / 3

Distinctiveness Conflict Risk

Occupies a clear niche (HIPAA Security Rule test patterns) with distinct triggers and even names sister catalogs (gdpr-test-patterns, ccpa-test-patterns), making conflict with other skills unlikely.

3 / 3

Total

11

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

Table of Contents