Use this skill at the very start of every OpenSpec change (Step 0) for a medical-data SaaS / data platform repository. It classifies the data tier (L1-L4) the change will touch, enumerates the minimal required fields, and produces a signed COMPLIANCE_TAG.md plus a MODEL_ALLOWLIST.json that the mcp-model-router uses as a runtime gate. Always run before any PRD work, model invocation, or code generation that may touch patient / health data. Chinese trigger examples: "合规预检", "数据分级", "新需求合规", "字段清单合规", "PHI 风险评估", "Step 0", "模型 allowlist 生成". Do NOT use for non-medical changes, for pure infra refactors with no data exposure, or after a change has already entered Step 1. Success = signed COMPLIANCE_TAG.md, valid MODEL_ALLOWLIST.json injected into mcp-model-router, all "Yes" risks have mitigation, zero unsigned fields entering the prompt.
How to install compliance-precheck?
charliehzm/medharness/compliance-precheck
$npx -y skills add charliehzm/medharness --skill compliance-precheckInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/charliehzm/medharness" --skill "charliehzm/medharness/compliance-precheck"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/charliehzm/medharness" that are relevant to the current task. Run `npx skills add "https://github.com/charliehzm/medharness"` and select the relevant skills, then follow their instructions.
Related
6 picksType
- entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.Jul 2026
- azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks.Jul 2026
- entra-agent-idProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token…Jul 2026
- firebase-security-rules-auditorAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource…Jul 2026
- golang-securitySecurity best practices and vulnerability prevention for Golang.Jul 2026
- gws-modelarmorGoogle Model Armor: Filter user-generated content for safety.Jul 2026
