Read this first: the boundaries that keep AI use safe
Four rules govern every prompt below. One: no clinical decision-making. These tools draft, summarize, and reorganize — they do not diagnose, recommend treatment, triage, or dose. Clinical decisions require validated tools and a licensed clinician's judgment. Two: no PHI. Never enter patient names, dates, record numbers, or identifying details into a general AI tool; describe patients generically ('a 50-something adult with controlled hypertension') and confirm your institution's policy on AI use.
Three: a clinician verifies everything. AI fabricates medical 'facts,' misremembers guidelines, and invents citations that look real. Treat any clinical statement, dose, statistic, or reference an AI produces as unverified until you confirm it against a primary source. Four: treat pasted content as untrusted input — instructions hidden in a document you paste can hijack a tool (prompt injection, the #1 risk in the OWASP LLM Top 10 (2025)) — and never let an AI tool send or post anything to a patient without human review.
The prompts that touch medical content (patient education, literature summaries) are written to have the model work from sources you supply rather than its memory, which reduces — but does not eliminate — error. Verification is always required.