Clinic marketing has two jobs that pull against each other. You need a steady flow of service pages, location pages, blog posts and ads. And every one of those pages makes claims about people’s health, which means a wrong sentence can hurt a patient, earn a complaint, or sink your rankings.
Claude Code skills can carry a lot of the production load. A skill is a folder with a SKILL.md file that tells Claude how to do one job, and Claude loads it when a task matches. The right set gives you audits, briefs, schema and local SEO checks on demand. The wrong setup puts patient data into a tool that is not covered for it.
This guide covers both sides. You get the free and paid skills worth installing for healthcare marketing, the workflows and prompts that suit clinics, a medical review process that keeps a clinician in the loop, and the HIPAA limits that apply, with Anthropic’s own BAA terms as published on its privacy center. GitHub data was checked through the GitHub API on 2 November 2026.
One honest note before we start: this post is research-based. We read the repos, docs and official guidance. We did not run a controlled test of these skills on a live clinic site, and we do not report results we did not measure.
The short answer: what should a clinic marketer install?
Install Corey Haines’ marketingskills for copy and CRO, claude-seo for technical and local SEO, and Anthropic’s Marketing plugin for campaign planning and brand review. All three are free. Then add a written medical review step and keep patient data out of every session unless your organization runs Claude under a signed BAA with the HIPAA configuration applied.
That last sentence matters more than any skill choice. The tools below help with marketing content. None of them makes your setup HIPAA compliant.
Shortlist at a glance
| # | Skill or pack | Source | Free or paid | Best for in healthcare | Stars (2 Nov 2026) | Last push |
|---|---|---|---|---|---|---|
| 1 | marketingskills | github.com/coreyhaines31/marketingskills | Free (MIT) | Service page copy, CRO, email | ~57.9k | 31 Oct 2026 |
| 2 | claude-seo | github.com/AgriciDaniel/claude-seo | Free (MIT) | Local SEO, schema, technical audits | ~25.6k | 1 Nov 2026 |
| 3 | Marketing plugin (Anthropic) | github.com/anthropics/knowledge-work-plugins | Free (Apache-2.0) | Campaign plans, brand review | ~34.4k (repo) | 1 Nov 2026 |
| 4 | ECC healthcare skills | github.com/affaan-m/ECC | Free (MIT) | HIPAA and PHI checks on site code | ~294.8k (repo) | 30 Oct 2026 |
| 5 | GRC HIPAA skill | github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance | Free (MIT) | HIPAA policy questions, risk framing | ~1.0k | 10 Oct 2026 |
| 6 | Claude for Healthcare plugin | github.com/anthropics/healthcare | Free to install, no licence file listed | NPI lookups, PubMed sources | ~434 | 27 Aug 2026 |
| 7 | claude-skills marketing bundle | github.com/alirezarezvani/claude-skills | Free (MIT) | Broad marketing library | ~29.1k (repo) | 31 Oct 2026 |
| 8 | Inflectual Master Marketing Skills Bundle | inflectual.gumroad.com | Paid: $167 one-time | 167 general marketing skills | n/a | n/a |
| 9 | Contra Ultimate Claude SEO & AEO Skills Pack | contra.com | Paid: $39 shown (listed against $79) | SEO and AI-answer content | n/a | n/a |
| 10 | SuperSkills | superskills-one.vercel.app | Paid: $50 | General skill pack | n/a | n/a |
| 11 | DataForSEO (data, used by claude-seo) | dataforseo.com | Paid: pay-as-you-go, $50 minimum top-up, $1 trial | Local rank and SERP data | n/a | n/a |
Stars measure popularity, not clinical safety. None of these packs was built by a medical reviewer, and none should publish health claims without one.
Why healthcare marketing is different: YMYL and E-E-A-T
Google treats health as a “Your Money or Your Life” topic, and its own guidance says such content “must be highly accurate and consistent with established expert consensus.” That raises the bar for every AI-assisted page a clinic publishes.
Google’s helpful content guidance, at developers.google.com/search/docs/fundamentals/creating-helpful-content, says it gives extra weight to content with strong E-E-A-T (experience, expertise, authoritativeness, trust) for topics that “could significantly impact the health, financial stability, or safety of people.” The same page says “trust is most important” of the four, that E-E-A-T “isn’t a specific ranking factor,” and that “easily-verified factual errors” count against expertise.
It also warns about authorship: “Any form of deception makes a page untrustworthy to both users and our automated quality systems.” For a clinic, that rules out a common shortcut. You cannot let Claude draft a page and then put a doctor’s name on it as if the doctor wrote it, unless the doctor did review it.
What this means for skill setup
Generic marketing skills optimise for persuasion and keyword coverage. In healthcare, you need them to also do four things they do not do by default:
- Cite. Every clinical claim links to a primary source (a guideline body, a peer-reviewed paper, a .gov page).
- Hedge correctly. “May help” where evidence is limited; no “cures,” no guaranteed outcomes.
- Name the reviewer. A real byline and a “medically reviewed by” line with a date, only when that review happened.
- Stay inside scope. Marketing pages describe services and set expectations. They do not diagnose.
You add these rules by writing a small house skill (see the section on building one) or by putting them in your project’s CLAUDE.md, so every marketing skill inherits them.
| E-E-A-T element | What the page needs | What Claude can do | What only a human can do |
|---|---|---|---|
| Experience | Real clinic detail, real process | Draft structure, ask for facts | Supply the facts |
| Expertise | Accurate clinical content | Pull and cite sources | Confirm accuracy |
| Authoritativeness | Credentials, affiliations | Format author box, schema | Hold the credentials |
| Trust | Correct, honest, current | Flag stale or unsupported claims | Sign off |
Takeaway: Claude can speed up the drafting and the checking, but the expertise and the sign-off have to come from a person with credentials.
HIPAA limits on patient data: what HHS says
HIPAA does not ban AI in marketing. It restricts what you do with protected health information (PHI). Using PHI for “marketing,” as HIPAA defines it, generally needs the patient’s written authorization, and any vendor that handles PHI for you needs a business associate agreement.
This is general information, not legal advice. Have your privacy officer or counsel confirm how it applies to your practice.
The rules that touch marketing
- Marketing definition and authorization. The HIPAA Privacy Rule defines marketing at 45 CFR 164.501 and requires an authorization for most uses of PHI for marketing at 45 CFR 164.508(a)(3). HHS explains this on its marketing guidance page: hhs.gov/hipaa/for-professionals/privacy/guidance/marketing.
- Business associates. A vendor that creates, receives, maintains or transmits PHI on your behalf is a business associate and needs a BAA (45 CFR 164.502(e) and 164.504(e)). HHS: hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions.
- Online tracking. HHS’s Office for Civil Rights published a bulletin on tracking technologies (pixels, cookies, session replay) at hhs.gov/hipaa/for-professionals/privacy/guidance/hipaa-online-tracking. In American Hospital Association v. Becerra (N.D. Tex., 20 June 2024), the court vacated the part of that guidance that treated an IP address plus a visit to an unauthenticated public page as PHI. Law-firm summaries (for example Morrison Foerster’s July and September 2024 notes) report HHS withdrew its appeal in August 2024. Other parts of the bulletin, including tracking on patient-portal and other authenticated pages, were not vacated. We could not load the HHS page directly while researching (it returned a 403), so check its current text yourself.
What counts as PHI in a marketing workflow
Patient names, phone numbers and emails from your booking system, appointment lists, review replies that confirm someone is a patient, intake form answers, and call recordings. If any of those would go into a Claude prompt, a CSV you hand to a skill, or an MCP connector, you are processing PHI.
Practical rule for clinic marketers
| Task | PHI involved? | Safe on a normal Claude plan? |
|---|---|---|
| Write a service page about knee replacement | No | Yes |
| Audit the website’s schema and speed | No | Yes |
| Draft a review-reply template | No | Yes |
| Reply to a specific patient’s Google review naming their visit | Yes, likely | No |
| Segment an email list from your EHR export | Yes | No, unless covered by a BAA |
| Summarise call recordings for ad insights | Yes | No, unless covered by a BAA |
Takeaway: keep patient-level data out. Most marketing work does not need it.
Does Anthropic offer a BAA for Claude Code?
Yes, for some commercial setups. Anthropic’s privacy center says it signs BAAs for HIPAA-ready Claude Enterprise organizations and its first-party API, and that Claude Code is covered only in specific configurations. Consumer plans are not listed as covered, and skills, plugins, MCP servers and connectors are excluded.
We read Anthropic’s article “Will Anthropic sign a business associate agreement (BAA), and if so, for which products?” at privacy.claude.com/en/articles/8114513 (the old privacy.anthropic.com link redirects there) on 2 November 2026. Key points as published:
- Claude Code covered: the terminal and the Desktop Code tab, when members sign in with an Enterprise account, connect directly to Anthropic, and the HIPAA configuration is applied. Claude Code with a Console API key is covered only if zero data retention is enabled.
- Claude Code not covered: the VS Code and JetBrains extensions, Claude Code through Bedrock, Google Cloud or Microsoft Foundry, LLM gateways or custom base URLs, and Console keys without ZDR. Cloud sessions, the mobile app and Remote Control are not available under the HIPAA configuration.
- Excluded features: connectors, MCP servers and third-party data flows; skills and plugins; Claude in Chrome; and beta products. On the API side, Batch, Files, Skills, Code Execution and Web Fetch are not covered.
- Consumer plans: Free, Pro, Max and other consumer plans are directed to a separate article and are not listed as covered.
- How to get it: on Enterprise, the Primary Owner turns on HIPAA compliance in the organization’s data and privacy settings and accepts the BAA. For the API, the organization signs a BAA and asks its Anthropic contact or sales team to enable PHI use.
What this means in plain terms
A clinic marketer on a $20 Pro plan (which includes Claude Code) should treat every session as non-PHI. Even an organization with an Enterprise BAA should note that the skills and MCP servers in this guide sit outside the covered list, so they should still only touch non-PHI work. Terms change, so re-read the page before you plan around it.
The best free Claude Code skills for clinic marketing
The free stack does almost everything a clinic needs: claude-seo for local and technical SEO, marketingskills for copy, Anthropic’s Marketing plugin for planning, and a few healthcare-specific skills for compliance checks on the site itself.
1. claude-seo (local SEO, schema, audits)
AgriciDaniel’s claude-seo ships separate sub-skills, including seo-local, seo-maps, seo-schema, seo-technical, seo-content and seo-geo. The seo-local skill describes itself as auditing “Google Business Profile, NAP consistency, citations, reviews, local schema, location pages, and multi-location structure.” For a multi-location clinic that is the core of the job. It can pull ranking data from DataForSEO if you add a key (paid, see below). More detail in our local SEO skills guide.
2. marketingskills (copy and conversion)
Corey Haines’ pack covers copywriting, page CRO, email sequences, pricing pages and more. For clinics, the useful parts are service-page copy, booking-flow CRO and new-patient email. Its default voice is SaaS-flavoured, so add your medical claims rules on top. See our marketingskills review.
3. Anthropic Marketing plugin (planning and brand review)
Install with:
claude plugin marketplace add anthropics/knowledge-work-plugins
claude plugin install marketing@knowledge-work-pluginsIt handles campaign plans, brand voice checks and performance reports. The brand review step is a good place to load your medical claims rules. Full breakdown in the Anthropic Marketing plugin review.
4. ECC healthcare skills (site code, not copy)
affaan-m/ECC (formerly everything-claude-code) includes hipaa-compliance, healthcare-phi-compliance and related skills. The hipaa-compliance entry describes itself as a “HIPAA-specific entrypoint for healthcare privacy and security work” and points to healthcare-phi-compliance for “data classification, audit logging, encryption, and leak prevention.” These are developer skills. Use them to review forms, tracking scripts and booking widgets on your site, not to write marketing copy.
5. Sushegaad GRC HIPAA skill (policy framing)
A compliance library with dozens of frameworks, HIPAA among them. Useful for drafting internal policy questions for counsel, such as “which of our marketing tools touch PHI?” It is not a substitute for that counsel.
6. Claude for Healthcare plugin (sources and provider data)
Anthropic’s anthropics/healthcare plugin installs with /plugin marketplace add anthropics/healthcare then /plugin install healthcare@healthcare. Most skills are clinical and payer tools (coding, prior auth, FHIR). For marketing, two connected MCP servers matter: the NPI Registry (confirm a provider’s public NPI details for bios and schema) and PubMed (find citations for clinical claims). The GitHub API shows no licence file for this repo, so read its terms before reuse. Do not use the FHIR skill for marketing: it pulls patient records.
7. alirezarezvani/claude-skills
A broad library with a marketing bundle. Good for filling gaps, such as social calendars, after the core stack is set.
Paid options: worth it for a clinic?
Paid packs are general marketing skills. None we found is built for healthcare, so a clinic still has to add its own medical claims rules. Buy one only if it saves setup time you would otherwise spend.
| Product | Price (as stated on vendor page) | What you get | Healthcare fit |
|---|---|---|---|
| Inflectual Master Marketing Skills Bundle | $167 one-time | 167 marketing skills | General; needs medical rules added |
| Contra Ultimate Claude SEO & AEO Skills Pack | $39 shown, listed against $79 | SEO and answer-engine content skills | Useful for service pages; needs review layer |
| SuperSkills | $50 | General skill pack | General |
| DataForSEO | Pay-as-you-go, $50 minimum top-up, $1 trial | Rank, SERP and local pack data | Strong for multi-location tracking |
| Claude Pro | $20/month ($17/month billed yearly) | Includes Claude Code | Not a HIPAA setup |
Sources: inflectual.gumroad.com/l/master-marketing-claude-skills-bundle, the Contra listing, superskills-one.vercel.app, dataforseo.com pricing, claude.com/pricing.
The honest view: a solo practice can run the whole free stack and spend money on DataForSEO credits and a clinician’s review time instead. An agency with ten clinic clients may find a paid bundle saves onboarding hours. We have not measured that saving.
Workflow 1: a medically reviewed service page
The pattern is draft, cite, flag, review, publish. Claude does the first three steps; a licensed clinician does the review; you record who reviewed and when.
Step-by-step
- Brief. Use a content brief skill with clinic facts you supply: services offered, which clinicians perform them, insurance accepted, locations. See content brief skills.
- Draft. Example prompt:
Using marketingskills copywriting and our CLAUDE.md medical rules, draft a service page for “physical therapy for lower back pain” at our Austin clinic. Use only the facts in clinic-facts.md. Every clinical statement needs a citation from PubMed or a guideline body. Mark each claim with [CLAIM-n]. No outcome guarantees. Leave the reviewer byline as [REVIEWER].
- Claim table. Ask Claude to output a table of every [CLAIM-n], its source URL, and a confidence note. This is what the reviewer works from.
- Clinician review. A licensed clinician reads the page and the claim table, edits, and signs off. Store the sign-off (name, credential, date) in your CMS.
- Publish with honest bylines. Add the “medically reviewed by” line and
PersonplusMedicalWebPageschema only after step 4. - Re-review date. Set a review date, often 12 months, and have Claude flag pages past due.
What the output should contain
- H1 with service and location
- Plain-language overview, who it helps, what a visit involves
- Risks and when to see a doctor instead
- Citations inline
- Claim table (separate file, not published)
- No patient stories unless you hold written authorization for each one
Takeaway: the claim table is the single most useful artifact. It turns a vague “please check this” into a list a clinician can clear in one sitting.
Workflow 2: local SEO for a multi-location clinic
For clinics, local search is often the main acquisition channel. Run seo-local per location, fix NAP consistency, build distinct location pages, and add MedicalClinic or Physician schema with accurate details.
Example prompt
Run seo-local on https://exampleclinic.com for each of our 4 locations in locations.csv (name, address, phone, hours, services). Check NAP consistency across the site, location pages and schema. List thin or duplicate location pages. Output a fix list ranked by effort and likely impact, plus corrected JSON-LD per location using MedicalClinic.
What the output should contain
- NAP mismatch list with page URLs
- Location page gaps: unique content, directions, parking, providers on site, services at that site
- Schema per location (
MedicalClinic,geo,openingHoursSpecification,medicalSpecialty) - Google Business Profile checklist: categories, services, photos, Q&A
- Review program notes (see FTC section below)
For schema detail see schema markup skills.
Location pages without doorway risk
Google’s spam policies warn against doorway pages, near-duplicate pages made to rank for many locations. Each clinic page should hold facts only true of that site: who practises there, what services it offers, how to get there. If a location has nothing unique, merge it. Claude can find duplicates fast; the facts have to come from your team.
Workflow 3: reviews, testimonials and the FTC
Never let any tool write patient reviews. The FTC’s rule on consumer reviews and testimonials (16 CFR Part 465, in effect since October 2024) bans fake reviews, including AI-generated ones, and HIPAA adds a second layer: confirming someone is your patient in a public reply can disclose PHI.
The FTC’s announcement of the final rule is at ftc.gov (search “Trade Regulation Rule on the Use of Consumer Reviews and Testimonials”). The rule covers reviews by people who do not exist or did not have the experience, and buying positive reviews.
Safe uses of Claude here
- Draft a generic reply template that does not confirm treatment: “Thank you for your feedback. We cannot discuss individual care online, please call our office manager at the clinic number.”
- Draft the request email asking patients for honest reviews, sent from your own compliant system.
- Analyse aggregate, de-identified review themes you export without names.
Unsafe uses
- Writing reviews or “sample testimonials” for the site
- Replying to a named review with details of care
- Using a patient’s story in an ad without written HIPAA authorization
Workflow 4: paid ads with health claims
Ad platforms have their own healthcare policies on top of the law. Use marketingskills or an ad copy skill to draft variants, then run each through your medical claims rules and the platform’s policy before launch.
Google Ads has a healthcare and medicines policy, and Meta restricts some health targeting and claims. Read the current policy pages for each platform; they change. Remarketing to people based on visits to condition pages is where HIPAA and platform policy overlap, so ask counsel before you set up audiences from site behaviour. See ad copy skills and PPC skills.
Example prompt
Write 10 Google search ad variants for our dermatology clinic’s acne treatment service. No before/after promises, no “cure,” no claims of being “best.” Flag any line that could break Google’s healthcare ad policy and explain why.
The output should contain the variants, a flag column, and a note of which clinical claims need a citation on the landing page.
Build a house “medical claims” skill
The most valuable skill for a clinic is one you write yourself: a short SKILL.md holding your claim rules, review steps and banned phrases. Every other skill then works inside those rules.
A minimal version:
---
name: clinic-medical-claims
description: Use for any patient-facing content for our clinic, including pages, ads, emails and social posts.
---
Rules:
1. Every clinical claim cites a primary source (guideline body, peer-reviewed paper, .gov).
2. No guaranteed outcomes, no "cure", no "best", no "painless".
3. Mark claims [CLAIM-n] and output a claim table.
4. Never add a reviewer byline. Leave [REVIEWER] for a human.
5. Never use patient names, stories or data. If given any, stop and say so.
6. Include "when to see a doctor" guidance on condition pages.
7. Facts about our clinic come only from clinic-facts.md.Put it in .claude/skills/clinic-medical-claims/ in your project. How-to: build a Claude Code skill and install skills.
Rule 5 is a soft guard. A skill cannot stop someone from pasting data. Your real protection is a team policy about what goes into sessions.
Common mistakes clinic marketers make
The costly errors are about data and review, not prompts: pasting patient lists, fake bylines, unreviewed claims, and assuming a BAA covers skills and MCP servers.
- Pasting an EHR or CRM export into a Pro session. That is PHI on a plan not covered by Anthropic’s BAA.
- Assuming the BAA covers everything. Anthropic’s article lists skills, plugins, MCP servers and connectors as not covered.
- “Medically reviewed” lines with no review. Google’s guidance calls deception a trust problem; it can also mislead patients.
- Location page spam. Fifty near-identical city pages invite doorway issues.
- AI testimonials. Covered by the FTC rule above.
- Tracking pixels on the patient portal. The parts of the HHS tracking bulletin on authenticated pages were not vacated. Have a developer skill like ECC’s PHI review check your scripts, then have counsel decide.
- Skipping humanising. Robotic copy reads as low-trust on a health page. See humanizing skills.
What these skills cannot do
No skill makes a clinic HIPAA compliant, no skill can confirm clinical accuracy, and no skill replaces counsel on state medical advertising rules.
State medical boards and professional bodies set their own advertising rules (for example, rules on specialty claims or “board certified” wording). These vary by state and profession. Claude can help you build a checklist from your board’s published rules, but you need to find and read those rules.
Skills also cannot verify that a clinician holds a credential. The NPI Registry MCP shows public NPI data, which is not the same as checking licence status with a state board.
A 30-day rollout for a clinic or agency
Week 1: policy and house skill. Week 2: technical and local audit. Week 3: rewrite top service pages with review. Week 4: measure and set re-review dates.
| Week | Task | Skill | Human owner |
|---|---|---|---|
| 1 | Write data policy: no PHI in Claude sessions unless BAA-covered | none | Practice manager, counsel |
| 1 | Create clinic-medical-claims skill and clinic-facts.md | custom | Marketing lead |
| 2 | Technical and local audit | claude-seo | Marketing lead |
| 2 | Tracking script review on forms and portal | ECC healthcare-phi-compliance | Developer |
| 3 | Rewrite 5 top service pages | marketingskills + house skill | Clinician reviewer |
| 4 | Fix schema, GBP, location pages | claude-seo seo-local, seo-schema | Marketing lead |
| 4 | Set 12-month review dates | house skill | Clinician |
Agencies running this across clients will find more in skills for marketing agencies.
What practitioners are saying
We tried to pull live Reddit threads for this post, but reddit.com blocked our research tools, so we quote no Reddit users here. Search results pointed to discussions where a physician asked whether other doctors use Claude for marketing and proposals, and where a therapist described building practice software with Claude. We could only see these through a third-party mirror, so we do not quote them.
The recurring theme across the vendor blogs we read is the same split this guide draws: website and content work is a good fit, patient data is not, unless the setup is covered.
FAQ
Can I use Claude Code for healthcare marketing?
Yes, for work that does not involve PHI: service pages, local SEO, schema, ad drafts, audits. Keep patient data out unless your organization has a BAA and the HIPAA configuration applied.
Does Anthropic sign a BAA?
Yes, for HIPAA-ready Claude Enterprise organizations and the first-party API, per its privacy center article 8114513. Consumer plans are not listed as covered.
Is Claude Code covered under Anthropic’s BAA?
Only in specific setups: terminal or Desktop Code tab, Enterprise sign-in, direct connection to Anthropic, HIPAA configuration applied, or a Console key with zero data retention. IDE extensions and third-party clouds are not covered.
Are Claude Code skills and MCP servers covered by the BAA?
No. Anthropic lists skills, plugins, MCP servers and connectors as not covered.
Is Claude Pro HIPAA compliant?
Pro is a consumer plan and is not listed in Anthropic’s BAA coverage. Treat it as a non-PHI tool.
What is PHI in marketing?
Health information that identifies a person and is held by a covered entity or business associate, such as patient names with appointment data, intake answers or call recordings.
Do I need patient authorization to use testimonials?
Generally yes, under HIPAA’s marketing rules (45 CFR 164.508(a)(3)), for a covered entity using a patient’s information. Confirm with counsel.
Can AI write reviews for my clinic?
No. The FTC’s consumer reviews rule bans fake reviews, including AI-generated ones.
What is YMYL?
Google’s term for topics that could affect health, finances or safety. Health pages face a higher accuracy bar.
Is E-E-A-T a ranking factor?
Google says it “isn’t a specific ranking factor” but its systems look for signals that line up with it, especially on YMYL topics.
Which skill is best for clinic local SEO?
claude-seo’s seo-local skill, paired with seo-schema for MedicalClinic markup.
Can I put tracking pixels on my clinic website?
A court vacated part of HHS’s guidance for unauthenticated pages in 2024, but authenticated pages such as patient portals remain a risk area. Get legal advice before adding ad pixels.
Does the Claude for Healthcare plugin help with marketing?
Partly. Its PubMed and NPI Registry MCP servers help with citations and provider details. Most of its skills are clinical and payer tools.
Who should medically review AI-written content?
A licensed clinician in the relevant field, whose name and date go on the page only after review.
How often should medical pages be re-reviewed?
Many clinics use 12 months or when guidance changes. Set a date and track it.
Are paid skill packs better for healthcare?
None we found is healthcare-specific. The free stack plus a house claims skill covers most needs.
Is this guide legal advice?
No. It summarises published sources. Confirm with your privacy officer or counsel.
Sources and methodology
Repo stars, licences and last-push dates came from the GitHub API on 2 November 2026. Anthropic’s BAA terms came from its privacy center on the same date. Prices are the ones shown on each vendor’s own page. Plan pricing for Claude Enterprise is not public, so we do not quote it.
- Anthropic BAA article: https://privacy.claude.com/en/articles/8114513-will-anthropic-sign-a-business-associate-agreement-baa-and-if-so-for-which-products
- Google helpful content guidance: https://developers.google.com/search/docs/fundamentals/creating-helpful-content
- HHS marketing guidance: https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/marketing/index.html
- HHS tracking technologies bulletin: https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/hipaa-online-tracking/index.html
- HHS business associate provisions: https://www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html
- AHA v. Becerra summary (Morrison Foerster): https://www.mofo.com/resources/insights/240718-federal-judge-vacates-ocr-guidance
- HHS appeal withdrawal (Morrison Foerster): https://www.mofo.com/resources/insights/240930-a-mofo-privacy-minute-q-a-hhs-withdraws
- FTC consumer reviews rule: 16 CFR Part 465, ftc.gov
- coreyhaines31/marketingskills, AgriciDaniel/claude-seo, anthropics/knowledge-work-plugins, affaan-m/ECC, Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, anthropics/healthcare, alirezarezvani/claude-skills (all on github.com)
- Inflectual: https://inflectual.gumroad.com/l/master-marketing-claude-skills-bundle
- SuperSkills: https://superskills-one.vercel.app/
Your next step
Write the house claims skill first. It takes about an hour, and it makes every other skill on this list safer to use. Then run seo-local on your site and fix the top three issues it finds. For a broader SEO stack, see Claude Code skills for SEO.
