phi-redaction SKILL.md skillA
phi-redaction from aks129/healthclawguardrails is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add aks129/healthclawguardrails/phi-redaction@git:20260905.3768b55Pins git:20260905.3768b55 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- aks129/healthclawguardrails
- Path
skills/phi-redaction/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260905.3768b55, committed Sep 5, 2026
- First version recorded
- Feb 22, 2026
- Size
- 3,657 bytes
- Repository stars
- 31
- License
- MIT
Conservative PHI redaction patterns for FHIR resources. Use when: (1) Redacting patient health information from FHIR resources before AI agent access, (2) Implementing de-identification for clinical data pipelines, (3) Understanding what fields are stripped, masked, or truncated in FHIR resources, (4) Building read paths that automatically protect patient privacy.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# PHI Redaction for FHIR Resources
Standard redaction profile for Protected Health Information (PHI) applied on all
read paths in the FHIR MCP guardrail stack. This is a technical minimization
preview, not a legal Safe Harbor determination.
## When to Use This Skill
- You need to understand how PHI is stripped from FHIR resources
- You are building a pipeline that must redact clinical data before AI access
- You need to implement or audit de-identification logic for FHIR
## Redaction Rules
All redaction is applied at read time, not at storage time.
### Names (`HumanName`)
- **Family name**: Kept as-is
- **Given names**: Truncated to first initial + period (e.g., "John" -> "J.")
- **Text**: Removed
### Identifiers
- **Value**: Removed (e.g., `{"system": "…/us-ssn", "value": "123-45-6789"}` -> `{"system": "…/us-ssn"}`)
- **System and type**: Kept for reference
### Addresses
- **Line and text**: Removed
- **City, state, country**: Kept (for demographic analysis)
### Telecom (Phone, Email)
- **Value**: Replaced with `[Redacted]`
- **System and use**: Kept
### Birth Date
- **Truncated to year only** (e.g., "1985-03-15" -> "1985")
### Photos
…Read the whole file at its exact version.
How to install
mdr add aks129/healthclawguardrails/phi-redaction@sha256:a36ae88710daa8f0The line at the top of this page pins the label git:20260905.3768b55, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ctv7ccztzltoo2gc)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Feb 22, 2026 and Sep 5, 2026, about one every 65 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260905.3768b55 latest | 2026-09-05 | 3768b55 | 3,657 B | A | view · diff |
| git:20260713.03e6949 | 2026-07-13 | 03e6949 | 3,505 B | A | view · diff |
| git:20260414.cf87ffd | 2026-04-14 | cf87ffd | 3,453 B | A | view · diff |
| git:20260222.10535b9 | 2026-02-22 | 10535b9 | 3,484 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3657 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
aks129/healthclawguardrails · 31 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ctv7ccztzltoo2gc GET https://markdownregistry.com/api/v1/resolve?ref=aks129/healthclawguardrails/phi-redaction GET https://markdownregistry.com/api/v1/blob/a36ae88710daa8f01697d139892cb22d571ffbac391f43235fa80d9dd1b26d6c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.