casemark/deficiency-corrective-action-plan
skills/legal/deficiency-corrective-action-plan/SKILL.md
Drafts U.S. healthcare corrective action plans (CAPs / plans of correction) responding to survey deficiencies, audits, or inspections. Produces deficiency statements, root cause analysis, corrective actions, accountability assignments, timelines, monitoring, and validation aligned to CMS, Joint Commission, and state health department standards. Triggers on CAP, plan of correction, statement of deficiencies, survey findings, accreditation response, regulatory remediation, QAPI corrective action.
$ install --global
skillsauthnpx skillsauth add casemark/skills deficiency-corrective-action-planInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 27, 2026, 8:04 AM104.6s1 file scanned
SKILL.md
- name:
- deficiency-corrective-action-plan
- language:
- en
- description:
- Drafts U.S. healthcare corrective action plans (CAPs / plans of correction) responding to survey deficiencies, audits, or inspections. Produces deficiency statements, root cause analysis, corrective actions, accountability assignments, timelines, monitoring, and validation aligned to CMS, Joint Commission, and state health department standards. Triggers on CAP, plan of correction, statement of deficiencies, survey findings, accreditation response, regulatory remediation, QAPI corrective action.
Corrective Action Plan (Healthcare)
Produces a regulator-ready CAP that is specific, measurable, and mapped to cited healthcare compliance deficiencies.
Quick Start
- Collect the survey report with citations, scope/severity, and dates.
- Run root cause analysis (Five Whys or fishbone) for each deficiency.
- Draft corrective actions (immediate + systemic) with absolute dates, owners, and monitoring metrics.
- Complete the submission checklist and obtain executive signatures.
Prerequisites
- Statement of deficiencies / survey report — citations, scope/severity, dates, cited evidence.
- Prior regulator correspondence, exit interview notes, prior plans of correction.
- Relevant policies, procedures, training curricula, competency records.
- RCA inputs — incident reports, audit data, QA/QAPI logs, staffing metrics, workflow artifacts.
- Org chart with role owners for each corrective action.
- Submission deadline and format requirements from regulator/accreditor.
Output Structure
1. Document Header
Facility name, survey/audit date(s), regulator/accreditor, CAP version/date, primary contact, submission deadline.
2. Deficiency Summary
One row per cited deficiency. Use verbatim finding text from the survey report.
| Deficiency ID | Citation/Standard | Survey Finding (Verbatim) | Scope/Severity | Affected Unit | Date(s) | Repeat? | Immediate Jeopardy? | |---|---|---|---|---|---|---|---| | D-1 | 42 CFR §___ / State Code ___ / JC Std ___ | | | | | Y/N | Y/N |
3. Root Cause Analysis
- Use Five Whys or fishbone for each deficiency.
- Distinguish systemic vs. isolated causes.
- Tie each cause to evidence from records.
4. Corrective Action Plan Table
One row per corrective action. Separate immediate correction from systemic prevention.
| Deficiency ID | Root Cause(s) | Immediate Correction | Systemic Prevention | Owner (Name/Title) | Resources | Start Date | Due Date | Milestones | Monitoring Metric | Frequency | Validation Criteria | Evidence | |---|---|---|---|---|---|---|---|---|---|---|---|---| | D-1 | | | | | | | | | | | | |
Action categories: policy updates, training, staffing, workflow redesign, technology, resource commitments.
5. Accountability
- Name CAP coordinator and action owners by title.
- Confirm each owner has authority to allocate resources and enforce compliance.
6. Timeline
- Absolute dates for every action and milestone.
- Align with regulator deadlines; escalate conflicts to leadership.
7. Monitoring and Validation
| Element | Define | |---|---| | Process metrics | Measure implementation progress | | Outcome metrics | Measure deficiency resolution | | Sampling method | How data is collected | | Frequency | How often metrics are reviewed | | Reporting line | Who receives reports | | Success threshold | Objective criteria for sustained compliance | | Duration | Period of sustained compliance required | | Evidence | Artifacts proving compliance |
8. Sustainability
Integrate corrective actions into routine QAPI, orientation, and periodic re-audits.
9. Consistency Check
Reconcile with prior statements to regulators. Flag and resolve any conflicts.
10. Attachments
List all supporting artifacts: policies, training materials, audit tools, evidence documents.
Submission Checklist
- [ ] Citations and standards verified against survey report
- [ ] Actions specific, measurable, and mapped to root causes
- [ ] Absolute dates for every action and milestone
- [ ] Monitoring and validation thresholds defined and objective
- [ ] Responsibilities aligned with actual authority and reporting lines
- [ ] PHI removed or de-identified; HIPAA-compliant references only
- [ ] Consistency checked against prior regulator communications
- [ ] Executive approvals and signatures obtained
Guidelines
- Use the regulator's language for findings — do not minimize or dispute in the CAP.
- Avoid legal admissions beyond cited findings; stay factual and precise.
- If prior corrective actions failed, state why and how this plan differs.
- Use absolute dates, never relative timeframes.
- Tie every corrective action to a root cause and a monitoring metric.
- If multiple deficiencies share a root cause, document linkage and draft one integrated fix.
- Redact PHI; refer to cases by internal ID only.
- Keep tone professional, accountable, and non-defensive.
Troubleshooting
Regulator rejects CAP as too vague: Ensure each action specifies who, what, when, and how — not just policy revision intent. Add measurable milestones.
Repeat deficiency from prior survey: Explicitly address why the prior CAP failed and what differs this time. Regulators expect escalation, not repetition.
Timeline conflicts with regulator deadline: Escalate to leadership immediately. Request extension in writing before deadline, with interim safeguards documented.
Multiple deficiencies share one root cause: Draft a single integrated corrective action and cross-reference from each deficiency row. Do not duplicate.
Related Skills
casemark/medical-records-gap-analysis
tools
VerifiedTrustedCommunity
Audits the complete in-scope medical-record universe in a litigation matter and produces an attorney-facing, Bates-cited analysis of treatment gaps, missing records or providers, baseline coverage, material billing or production mismatches, and complaint evolution. Use when asked to find missing medical records, analyze treatment gaps or first-care timing, identify absent providers, assess whether a production is complete, or prepare a records-request target list. Use medical-record-chronology instead when the primary request is a chronological clinical narrative.
40SKILL.mdUpdated Sep 3, 2026
casemark/private-placement-memo
development
VerifiedTrustedCommunity
Drafts a legally compliant Private Placement Memorandum for Regulation D offerings (Rule 506(b)/506(c)), covering full disclosure framework including risk factors, capitalization, securities terms, use of proceeds, and investor qualification requirements. Enforces SEC anti-fraud compliance under Section 10(b)/Rule 10b-5, blue sky law considerations, and accredited investor verification under Rule 501. Use this skill when drafting PPMs, offering memorandums, Reg D disclosure documents, or private offering circulars for issuers raising capital from sophisticated investors. Also trigger when the user mentions private placement disclosure, offering memorandum, Reg D fundraising, or accredited investor verification. Even if the user just says "PPM" or "draft our offering memo," use this skill.
40SKILL.mdUpdated Apr 17, 2026
casemark/privacy-law-updates
data-ai
VerifiedTrustedCommunity
Generates structured privacy and data protection law briefings across US, EU, UK, and other jurisdictions. Organizes by jurisdiction with compliance deadlines, enforcement actions, and legislative changes. Use when preparing privacy law briefings, compliance updates, regulatory change summaries, or data protection landscape reviews.
40SKILL.mdUpdated Apr 17, 2026
casemark/prior-art-summary
testing
VerifiedTrustedCommunity
Generates structured summaries of prior art references for patent prosecution, validity analysis, and freedom-to-operate assessments. Maps disclosures to claim elements with precise citations. Use when summarizing prior art, analyzing patent landscapes, mapping references to claims, or preparing office action responses.
40SKILL.mdUpdated Apr 17, 2026