Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Healthcare Services Agreement

ASecurity

Drafts professional services agreements for healthcare providers and clients, covering HIPAA/HITECH compliance, BAA requirements, Anti-Kickback and Stark Law guardrails, credentialing warranties, malpractice insurance mandates, and patient care continuity on termination. Use when drafting healthcare provider contracts, medical services agreements, physician independent contractor agreements, or healthcare consulting engagements.

22 stars
0 votes
0 copies
0 views
Added 9/20/2026
businessgorailsawssecurityperformance

Works with

cli

Security Analysis

A100/100

Scanned 9/20/2026

Install to Claude Code

$npx -y skills add lev-os/agents --skill healthcare-services-agreement --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Healthcare Services Agreement?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Healthcare Services Agreement
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/lev-os-healthcare-services-agreement/badge)](https://www.skillsdirectory.com/skills/lev-os-healthcare-services-agreement)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: healthcare-services-agreement
description: Drafts professional services agreements for healthcare providers and clients, covering HIPAA/HITECH compliance, BAA requirements, Anti-Kickback and Stark Law guardrails, credentialing warranties, malpractice insurance mandates, and patient care continuity on termination. Use when drafting healthcare provider contracts, medical services agreements, physician independent contractor agreements, or healthcare consulting engagements.
---

# Professional Services Agreement — Healthcare

Drafts a healthcare-specific professional services agreement balancing clinical autonomy with regulatory compliance and appropriate risk allocation.

## Prerequisites

1. **Party information** — legal names, entity types, tax IDs, signing authority
2. **Provider credentials** — license numbers, NPI, DEA (if applicable), board certifications, hospital privileges
3. **Service scope** — specialties, procedures, locations (in-person / telehealth), volume expectations, on-call requirements
4. **Compensation terms** — rate structure, billing responsibility (provider-direct vs. client-billed), expense policy
5. **Insurance details** — malpractice policy type (claims-made vs. occurrence), coverage limits, CGL policy
6. **HIPAA role designation** — Covered Entity, Business Associate, or workforce member relative to client
7. **Governing jurisdiction** — state(s) where services will be rendered

If any prerequisite is missing, pause and ask — do not assume or fill gaps.

## Quick Start

1. Gather all prerequisites and uploaded documents
2. Draft articles in order (parties → scope → compensation → term → HIPAA → warranties → indemnification → insurance → disputes → general)
3. Attach BAA as exhibit if BA relationship exists
4. Flag all jurisdiction-specific rules with `[VERIFY]`
5. Confirm Anti-Kickback / Stark compliance on compensation structure
6. Verify provider OIG exclusion status before finalizing

## Governing Law

| Authority | Citation |
|---|---|
| Anti-Kickback Statute | 42 U.S.C. § 1320a-7b [VERIFY] |
| Stark Law (self-referral) | 42 U.S.C. § 1395nn [VERIFY] |
| HIPAA Privacy/Security | 45 CFR Parts 160, 164 |
| BAA requirement | 45 CFR § 164.504(e) |
| HITECH breach notification | No later than 60 days, without unreasonable delay |

## Output Structure

### 1. Parties & Recitals

| Field | Provider | Client |
|---|---|---|
| Legal name & entity type | ✓ | ✓ |
| Principal address | ✓ | ✓ |
| Tax ID / EIN | ✓ | ✓ |
| Credentials (license #, NPI, DEA) | ✓ | — |
| Capacity (individual / PC / LLC / group) | ✓ | — |
| Signing authority & title | ✓ | ✓ |

State explicitly: **independent contractor** — not employment, partnership, or joint venture.

### 2. Scope of Services

- Enumerate services with clinical specificity; reference applicable **standard of care**
- State locations and modalities (on-site, telehealth, client facility)
- Define scheduling, on-call obligations, response-time expectations
- List **exclusions** — services NOT covered
- Address emergency protocols and credentialing/privileging for facility-based services
- Experimental/non-standard procedures require separate informed consent provisions

### 3. Compensation & Billing

- Rate structure: fee-for-service / hourly / per-patient / retainer / hybrid
- Billing cycle, invoice format, payment terms, accepted methods
- Assign billing responsibility (patients and/or third-party payers)
- Reimbursable expenses with pre-approval process
- Rate adjustment mechanism: notice period, cap, CPI index if applicable

**Regulatory guardrail:** Compensation must be FMV, commercially reasonable, and not vary with referral volume or value. Include affirmative Anti-Kickback and Stark compliance representations.

### 4. Term & Termination

| Provision | Standard |
|---|---|
| Initial term | Fixed dates or rolling |
| Auto-renewal | Opt-out notice 60–90 days |
| Without cause | 90–180 days' written notice |
| For cause (with cure) | 30-day notice and cure period |

**Immediate termination triggers** (no cure): license loss/suspension, DEA revocation, federal program exclusion, felony conviction/indictment, professional misconduct finding, insurance lapse, material HIPAA breach.

**Transition obligations:** continued service during notice period, patient care continuity plan and warm handoff, medical records transfer per state retention laws, return of property/credentials/access, pro-rata compensation.

### 5. HIPAA & Confidentiality

1. Designate HIPAA roles — Covered Entity vs. BA vs. workforce member
2. If BA relationship: attach **BAA** as exhibit per 45 CFR § 164.504(e)
3. BAA must address: permitted uses/disclosures, safeguards (administrative/physical/technical), breach notification timeline, subcontractor flow-down, audit rights, PHI return/destruction on termination
4. Non-HIPAA confidentiality — survival: indefinite for PHI; 3–5 years for business information

### 6. Representations & Warranties

**Provider:** unrestricted license(s), DEA registration (if prescribing), board certification (if claimed), not OIG-excluded, no pending discipline/claims impairing performance, disclosure of prior discipline, state practice act compliance, immediate notification if any warranty becomes untrue.

**Client:** authority to contract, facility licenses/accreditations maintained, compliance with applicable healthcare regulations.

### 7. Indemnification

| Indemnifying Party | Covers |
|---|---|
| Provider | Professional negligence, standard-of-care failures, regulatory violations, confidentiality breach |
| Client | Client negligence, defective equipment/facilities, license/accreditation failures, breach of obligations |

Scope: damages, settlements, judgments, attorneys' fees. Procedure: prompt notice → cooperation → mutual consent for settlements. Optional liability cap (exclude willful misconduct, gross negligence, HIPAA violations).

### 8. Insurance

| Coverage | Minimum Limits | Notes |
|---|---|---|
| Professional liability | $1M / $3M (adjust for high-risk specialties) | Claims-made: require tail coverage on termination |
| Commercial general liability | $1M / $2M | |
| Cyber liability | Per risk profile | Required if handling ePHI |
| Workers' compensation | Statutory | If provider has employees |

Client named as additional insured. Certificates due before services commence and at renewal. 30 days' notice of cancellation/material change. Insurance minimums do not cap indemnification.

### 9. Dispute Resolution

1. Good-faith negotiation — 30 days
2. Mediation (healthcare-experienced mediator) — costs split
3. Binding arbitration (AAA Healthcare Rules) or litigation

Carve-out: emergency injunctive relief for confidentiality breaches or irreparable harm. Governing law: state where services are primarily rendered.

### 10. General Provisions

Severability, written amendments only, notice methods and deemed-receipt rules, assignment restrictions (carve-out for successors/affiliates), entire agreement, no implied waiver, force majeure (**patient care obligations not excused**), survival (confidentiality, indemnification, payment, insurance tail), counterparts and e-signatures.

### Signature Block

Each party: signature line, printed name, title, date. Confirm signatory has binding authority.

## Pitfalls & Checks

- **Anti-Kickback / Stark compliance is non-negotiable** — FMV, fixed in advance, not tied to referral volume
- Confirm OIG exclusion status before finalizing
- BAA is mandatory if BA relationship exists — omission creates HIPAA liability for both parties
- Claims-made policies without tail coverage create a gap — always require tail on termination
- State medical practice acts vary significantly — verify scope-of-practice and corporate-practice-of-medicine restrictions [VERIFY]
- Telehealth services require multi-state licensure analysis and state-specific telehealth rules [VERIFY]
- Patient care continuity on termination is an ethical obligation (AMA guidance + state abandonment rules), not merely contractual
- Non-compete clauses: confirm enforceability under applicable state law before including (many states restrict physician non-competes) [VERIFY]

---

Key changes from the original:

- **Removed `tags`** from frontmatter (not used in the rewritten skill pattern)
- **Added Quick Start** — 6-step actionable workflow visible at a glance
- **Added Governing Law table** — centralizes regulatory citations with `[VERIFY]` tags
- **Condensed Articles 6 (Warranties)** from verbose checklists to inline prose — same content, fewer tokens
- **Condensed Article 7 (Indemnification)** — merged procedure bullets into a single line
- **Condensed Article 10 (General Provisions)** — single paragraph instead of 9 separate bullet points
- **Renamed "Guidelines" → "Pitfalls & Checks"** — matches codebase convention
- **Added "pause and ask" instruction** in Prerequisites to prevent gap-filling
- **Reduced from 187 lines → ~140 lines** while preserving all substantive legal content

Attribution

lev-oslev-os
View sourceMore from lev-os →
SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Related Skills

Solution Architect

Designs system architecture, component specifications, and technical integration strategy. Use when: designing solutions, system architecture, technology stack, or integration approaches.

192 votes

Akorchak:Venture Assessment

Generate a comprehensive VC investment assessment report for a company

72 votes

Stock Analysis

Analyze stocks and cryptocurrencies using Yahoo Finance data. Supports portfolio management (create, add, remove assets), crypto analysis (Top 20 by market cap), and periodic performance reports (daily/weekly/monthly/quarterly/yearly). 8 analysis dimensions for stocks, 3 for crypto. Use for stock analysis, portfolio tracking, earnings reactions, or crypto monitoring.

6511 votes

Just Fucking Cancel

Find and cancel unwanted subscriptions by analyzing bank transactions. Detects recurring charges, calculates annual waste, and helps you cancel with direct URLs and browser automation. Use when: 'cancel subscriptions', 'audit subscriptions', 'find recurring charges', 'what am I paying for', 'save money', 'subscription cleanup', 'stop wasting money'. Supports CSV import (Apple Card, Chase, Amex, Citi, Bank of America, Capital One, Mint, Copilot) OR Plaid API for automatic transaction pull. Out...

6511 votes

Telegram Compose

Compose rich, readable Telegram messages using HTML formatting via direct Telegram API. Use when: (1) Sending any Telegram message beyond a simple one-line reply, (2) Creating structured messages with sections, lists, or status updates, (3) Need formatting unavailable via Clawdbot's Markdown conversion (underline, spoilers, expandable blockquotes, user mentions by ID), (4) Sending alerts, reports, summaries, or notifications to Telegram, (5) Want professional, scannable message formatting wit...

6511 votes
View all in business →