PHI Readiness Stages

• Outcome: Pass
• Latest audit: Sep 12, 2026 · 6:35 AM UTC
• Version: 1.1.0

Overview

This is a documentation-only PHI readiness assessment skill with disclosed, purpose-aligned evidence handling and no hidden execution or persistence behavior.

Installers should understand that this skill may guide a reviewer through sensitive PHI readiness evidence. Use redacted screenshots, evidence pointers, and approved internal storage rather than pasting raw PHI or confidential compliance records into chat.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Memory Poisoning: Persistent Context Injection, Context Window Stuffing, Memory Manipulation
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (13)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 13)May include surrounding context.

md

This top-level `SKILL.md` is the canonical install and publish entrypoint for the repository root.

Memory Manipulation

High

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · framework/regulatory-boundaries.md (reported line 44)May include surrounding context.

md

## 4. State law and other regimes

HIPAA does not erase state-law review. More protective state privacy or breach rules may still apply. Other health-data rules may also apply when a workflow is outside HIPAA scope.

PRS should therefore:

Skill Enumeration

Medium

• Category: Agent Snooping
• Confidence: 80% confidence

Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · AGENTS.md (reported line 7)May include surrounding context.

md

## Required startup sequence

1. Read `skills/phi-readiness-review/SKILL.md`.
2. Read `framework/assessment-rules.md`.
3. Read `framework/applicability-role-matrix.md`.
4. Read `framework/stage-rubric.md`.

Skill Enumeration

Medium

• Category: Agent Snooping
• Confidence: 80% confidence

Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · README.md (reported line 97)May include surrounding context.

md

## Required startup sequence

1. Read `skills/phi-readiness-review/SKILL.md`.
2. Read `framework/assessment-rules.md`.
3. Read `framework/applicability-role-matrix.md`.
4. Read `framework/stage-rubric.md`.

Skill Enumeration

Medium

• Category: Agent Snooping
• Confidence: 80% confidence

Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · README.md (reported line 111)May include surrounding context.

md

## Required startup sequence

1. Read `skills/phi-readiness-review/SKILL.md`.
2. Read `framework/assessment-rules.md`.
3. Read `framework/applicability-role-matrix.md`.
4. Read `framework/stage-rubric.md`.

Skill Enumeration

Medium

• Category: Agent Snooping
• Confidence: 80% confidence

Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · README.md (reported line 118)May include surrounding context.

md

## Required startup sequence

1. Read `skills/phi-readiness-review/SKILL.md`.
2. Read `framework/assessment-rules.md`.
3. Read `framework/applicability-role-matrix.md`.
4. Read `framework/stage-rubric.md`.

Skill Enumeration

Medium

• Category: Agent Snooping
• Confidence: 80% confidence

Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 17)May include surrounding context.

md

## Required startup sequence

1. Read `skills/phi-readiness-review/SKILL.md`.
2. Read `framework/assessment-rules.md`.
3. Read `framework/applicability-role-matrix.md`.
4. Read `framework/stage-rubric.md`.

Skill Enumeration

Medium

• Category: Agent Snooping
• Confidence: 80% confidence

Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 21)May include surrounding context.

md

## Required startup sequence

1. Read `skills/phi-readiness-review/SKILL.md`.
2. Read `framework/assessment-rules.md`.
3. Read `framework/applicability-role-matrix.md`.
4. Read `framework/stage-rubric.md`.

Skill Enumeration

Medium

• Category: Agent Snooping
• Confidence: 85% confidence

Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · README.md (reported line 109)May include surrounding context.

md

### Claude Code

Clone the published repository into your Claude skills directory at `~/.claude/skills/phi-readiness-stages`, then use `/phi-readiness-stages` in Claude Code.

Claude will discover the root `SKILL.md` as the repository's canonical skill entrypoint. Then load `skills/phi-readiness-review/SKILL.md` as the canonical workflow.

Skill Enumeration

Medium

• Category: Agent Snooping
• Confidence: 85% confidence

Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · README.md (reported line 115)May include surrounding context.

md

### Codex

Copy or clone the published repository into your Codex skills directory at `~/.codex/skills/phi-readiness-stages`.

Codex can then use the root `SKILL.md` as the skill entrypoint, with `AGENTS.md` and the referenced framework files providing the full review flow.
Codex should then immediately load `skills/phi-readiness-review/SKILL.md` as the canonical workflow.

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · examples/prs-1-repo-only-security-aligned.md (reported line 7)May include surrounding context.

md

- Workload: internal scheduling API under active development
- Environment: development and staging only
- Deployment boundary: repository, infrastructure-as-code, and design artifacts; no approval or live PHI operation shown
- Framework version used: PRS Framework v1.1
- Assessment date: March 18, 2026
- Reviewer: example calibration case

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · framework/evidence-levels.md (reported line 37)May include surrounding context.

md

- Workload: internal scheduling API under active development
- Environment: development and staging only
- Deployment boundary: repository, infrastructure-as-code, and design artifacts; no approval or live PHI operation shown
- Framework version used: PRS Framework v1.1
- Assessment date: March 18, 2026
- Reviewer: example calibration case

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · framework/spec.md (reported line 56)May include surrounding context.

md

- Workload: internal scheduling API under active development
- Environment: development and staging only
- Deployment boundary: repository, infrastructure-as-code, and design artifacts; no approval or live PHI operation shown
- Framework version used: PRS Framework v1.1
- Assessment date: March 18, 2026
- Reviewer: example calibration case

Static analysis

No suspicious patterns detected.