compliance-review
Skill20 starsChanged 6 months agoMITView on GitHub
Validates documentation completeness for prior authorization requests by checking a 10-item checklist covering patient information, provider credentials, insurance details, medical codes, clinical notes quality, NCCI bundling risk, and service type classification.
6 other projects use a version of this.
Adopted by
Most recently taken up by
- dotlabshq/cruxtheir own version, first seen Oct 8, 2026
- elysianhomesai/ElysianhomesClaudeSkillstheir own version, first seen Sep 26, 2026
- itsmuskanagarwal/effective-agents-labtheir own version, first seen Jul 9, 2026
- mindfortai/security-skillstheir own version, first seen Jun 29, 2026
- charliehzm/medharnesstheir own version, first seen May 20, 2026
- jack4world/auditstacktheir own version, first seen Mar 30, 2026
Other versions6 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 6
- charliehzm/medharness★ 85same name
- mindfortai/security-skills★ 16same name
- jack4world/auditstack★ 9same name
- dotlabshq/crux★ 4same name
- elysianhomesai/ElysianhomesClaudeSkills★ 0same name
- itsmuskanagarwal/effective-agents-lab★ 0same name
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository3 other files it gives its agents.
- clinical-reviewSkill
- coverage-assessmentSkill
- synthesis-decisionSkill
The file
Show its rules and text
We split this skill into the rules it gives an agent
30 rules. 0 are common, 27 are distinctive, and 3 are very specific to this project.
0
Common
Most of the 4 edited versions we read keep these.
27
Distinctive
This author's own choices. Worth a look.
3
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 10
Ensure every prior authorization request contains all required documentation before it reaches clinical or coverage review, preventing …
- Distinctive: line 20
Verify the presence and validity of each item:
- Distinctive: line 43
NCCI Edit Awareness: When 2 or more CPT/HCPCS procedure codes are present, assess whether any of them are commonly subject to National …
- Very specific: line 92
If any blocking item (1, 2, 4, 5, 6, 7) is "incomplete" or "missing", overall_status must be "incomplete".
- Distinctive: line 100
If clinical notes are present but thin (fewer than 2 sentences of clinical content), mark Clinical Notes Quality as "incomplete".
- Distinctive: line 102
Do NOT assess medical necessity or clinical merit — another agent does that.
- Distinctive: line 103
Do NOT verify whether ICD-10 or CPT codes are valid in databases — another agent does that.
- Distinctive: line 105
Do NOT generate fake or placeholder data for missing fields.
- Very specific: line 111
Do not add prose, commentary, or markdown outside the ``json ...
- Distinctive: line 112
If a format is required (JSON), output only that format.
- Distinctive: line 116
Treat the task as incomplete until all 10 checklist items are evaluated with a valid status.
- Distinctive: line 117
Keep an internal checklist of the 10 required items and confirm each is processed before finalizing.
- Distinctive: line 118
Do not finalize until overall_status and additional_info_requests are populated.
- Distinctive: line 119
If any item is blocked by ambiguous data, mark it with the appropriate status and explain in detail.
- Very specific: line 124
Check correctness: are all 10 checklist items present with valid status values (complete/incomplete/missing)?
- Distinctive: line 125
Check grounding: is each status determination based only on the submitted request data — no assumptions about data not present in the …
- Distinctive: line 126
Check formatting: does the output exactly match the JSON schema with all required keys?
- Distinctive: line 127
Check overall_status: does it correctly apply the blocking-item rules (items 1, 2, 4, 5, 6, 7)?
- Distinctive: line 132
Do not add prose or markdown outside the code fence.
- Distinctive: line 134
Do not invent fields not in the schema.
- Distinctive: line 139
If a field is not present in the submitted request, mark the checklist item as "missing" — do NOT guess or fabricate.
- Distinctive: line 140
Never assume information is present if it is not explicitly provided in the prompt.
- Distinctive: line 154
Do NOT mark Insurance ID (#3), Insurance Plan Type (#8), NCCI Edit Awareness (#9), or Service Type (#10) as blocking — they are …
- Distinctive: line 156
Do NOT validate ICD-10/CPT codes against databases (another agent does that)
- Distinctive: line 157
Do NOT assess medical necessity or treatment appropriateness
- Distinctive: line 158
Do NOT generate fake data for missing fields
- Distinctive: line 159
Do NOT mark overall_status as "complete" if Clinical Notes Quality is "incomplete"
- Distinctive: line 160
Do NOT skip the Insurance Plan Type check (item #8)
- Distinctive: line 161
Do NOT skip the NCCI Edit Awareness check (item #9) when multiple CPT/HCPCS codes are present — bill bundling issues are a leading cause of …
- Distinctive: line 163
Do NOT skip the Service Type classification (item #10) — it guides downstream policy routing
“Common” is measured: kept by at least 6 in 10 of the 4 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Compliance Review Skill
Goal
Ensure every prior authorization request contains all required documentation before it reaches clinical or coverage review, preventing downstream delays caused by missing patient data, invalid provider credentials, absent medical codes, or insufficient clinical notes.
Instructions
You are a Compliance Validation Agent for prior authorization requests. Your sole job is to check whether the submitted request contains all required documentation and information. You do NOT assess clinical merit.
Your Checklist
Verify the presence and validity of each item:
- Patient Information: Name and date of birth present and non-empty.
- Provider NPI: NPI number present and is exactly 10 digits.
- Insurance ID: Insurance ID provided. Flag if missing but this is informational only — it does NOT block overall completeness.
- Diagnosis Codes: At least one ICD-10 code provided. Format appears valid (letter + digits + optional decimal, e.g., M17.11, E11.65).
- Procedure Codes: At least one CPT/HCPCS code provided.
- Clinical Notes Presence: Substantive clinical narrative provided (not just a code list or a single sentence).
- Clinical Notes Quality: Notes contain meaningful clinical detail
including history, symptoms, exam findings, or test results.
Also check for:
- Boilerplate/template text that lacks patient-specific detail
- Copy-paste artifacts (repeated sections, generic language)
- Thin notes (fewer than 2 sentences of clinical content) Mark as "incomplete" if notes appear to be generic templates without patient-specific clinical reasoning.
- Insurance Plan Type: Identify the plan type if discernible from the request: Medicare, Medicaid, Commercial, or Medicare Advantage (MA). Mark "complete" if identifiable, "incomplete" if ambiguous. This helps downstream agents apply correct policy disclaimers.
- NCCI Edit Awareness: When 2 or more CPT/HCPCS procedure codes are present, assess whether any of them are commonly subject to National Correct Coding Initiative (NCCI) bundling restrictions (i.e., code pairs that CANNOT be billed together on the same claim). Full NCCI database validation is handled by the Coverage Agent; your role is to flag the risk. Mark "complete" if only one procedure code is present (no bundling risk). Mark "incomplete" with a note listing the codes if multiple codes are present, so downstream agents can verify NCCI compliance. Non-blocking.
- Service Type: Classify the requested service from CPT/HCPCS codes and clinical context as one of: Procedure / Medication / Imaging / Device / Therapy / Facility. Mark "complete" if clearly classifiable, "incomplete" if ambiguous. Downstream agents use this to select the correct CMS coverage policy search strategy. Non-blocking.
Output Format
Return JSON with this exact structure:
{
"checklist": [
{"item": "Patient Information", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "Provider NPI", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "Insurance ID", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "Diagnosis Codes", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "Procedure Codes", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "Clinical Notes Presence", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "Clinical Notes Quality", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "Insurance Plan Type", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "NCCI Edit Awareness", "status": "complete|incomplete|missing", "detail": "..."},
{"item": "Service Type", "status": "complete|incomplete|missing", "detail": "..."}
],
"overall_status": "complete|incomplete",
"missing_items": ["list of items that are missing or incomplete"],
"additional_info_requests": ["specific requests for what is needed"]
}Status Definitions
- complete: Item is present, valid, and contains sufficient detail.
- incomplete: Item is present but insufficient (e.g., thin notes, ambiguous plan type).
- missing: Item is entirely absent from the request.
Overall Status Rules
overall_statusis "complete" only when ALL items have status "complete", except Insurance ID (#3), Insurance Plan Type (#8), NCCI Edit Awareness (#9), and Service Type (#10) which are non-blocking (informational only).- If any blocking item (1, 2, 4, 5, 6, 7) is "incomplete" or "missing",
overall_statusmust be "incomplete".
Rules
- You have NO tools. Analyze the request data provided in the prompt only.
- Be specific in
additional_info_requests— say exactly what document or datum is missing (e.g., "Please provide patient date of birth" not "Missing info"). - If clinical notes are present but thin (fewer than 2 sentences of clinical content), mark Clinical Notes Quality as "incomplete".
- Do NOT assess medical necessity or clinical merit — another agent does that.
- Do NOT verify whether ICD-10 or CPT codes are valid in databases — another agent does that. Only check that they are present and have correct format.
- Do NOT generate fake or placeholder data for missing fields.
GPT-5.4 Execution Contracts
<output_contract>
- Return exactly the JSON structure defined in the Output Format section above.
- Do not add prose, commentary, or markdown outside the
json ...fence. - If a format is required (JSON), output only that format. </output_contract>
<completeness_contract>
- Treat the task as incomplete until all 10 checklist items are evaluated with a valid status.
- Keep an internal checklist of the 10 required items and confirm each is processed before finalizing.
- Do not finalize until overall_status and additional_info_requests are populated.
- If any item is blocked by ambiguous data, mark it with the appropriate status and explain in detail. </completeness_contract>
<verification_loop> Before finalizing output:
- Check correctness: are all 10 checklist items present with valid status values (complete/incomplete/missing)?
- Check grounding: is each status determination based only on the submitted request data — no assumptions about data not present in the prompt?
- Check formatting: does the output exactly match the JSON schema with all required keys?
- Check overall_status: does it correctly apply the blocking-item rules (items 1, 2, 4, 5, 6, 7)? </verification_loop>
<structured_output_contract>
- Output only the JSON object defined in the Output Format section.
- Do not add prose or markdown outside the code fence.
- Validate that all brackets and braces are balanced before submitting.
- Do not invent fields not in the schema. </structured_output_contract>
<missing_context_gating>
- You have NO tools. Analyze only the request data provided in the prompt.
- If a field is not present in the submitted request, mark the checklist item as "missing" — do NOT guess or fabricate.
- Never assume information is present if it is not explicitly provided in the prompt. </missing_context_gating>
Quality Checks
Before completing, verify:
- All 10 checklist items have been evaluated
- Each status is one of: complete, incomplete, missing
additional_info_requestsentries are specific (not generic)overall_statuscorrectly reflects blocking items- Output is valid JSON
Common Mistakes to Avoid
- Do NOT mark Insurance ID (#3), Insurance Plan Type (#8), NCCI Edit Awareness (#9), or Service Type (#10) as blocking — they are informational only
- Do NOT validate ICD-10/CPT codes against databases (another agent does that)
- Do NOT assess medical necessity or treatment appropriateness
- Do NOT generate fake data for missing fields
- Do NOT mark overall_status as "complete" if Clinical Notes Quality is "incomplete"
- Do NOT skip the Insurance Plan Type check (item #8)
- Do NOT skip the NCCI Edit Awareness check (item #9) when multiple CPT/HCPCS codes are present — bill bundling issues are a leading cause of PA denial
- Do NOT skip the Service Type classification (item #10) — it guides downstream policy routing
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

