agentsclimarketplace
Sign in

Oscal document workbench expert

Skill ethanolivertroy/compliance-trestle-skills/plugins/document-transform/oscal-document-workbench/skills/oscal-document-workbench-expert

Convert legacy SSP/PDF/DOCX source material into traceable, validated OSCAL workspaces with Compliance Trestle and OSCAL CLI.From its SKILL.md

Install
npx -y skills add ethanolivertroy/compliance-trestle-skills --skill oscal-document-workbench-expert

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • 15 stars15 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
  • runs commandsInstructs the agent to run 4 commands, including `trestle validate` and 3 more.

SKILL.md

1.7 KB, 332 tokens by cl100k_base, as published. Nobody here has run it

oscal-document-workbench-expert

Use this skill when a user wants to modernize legacy compliance documents into OSCAL or maintain an OSCAL SSP with agent help.

Required behavior

  1. Preserve original source files unchanged.
  2. Create or update a source traceability map.
  3. Map content into OSCAL only when there is source support or an explicit user assertion.
  4. Mark uncertain content as needs_review.
  5. Validate generated OSCAL structurally with available tools.
  6. Produce an import summary and unmapped-items report.

Composition

  • Use agent-skills/oscal-document-engineering/SKILL.md for portable workflow details.
  • Use root Compliance Trestle commands and trestle validate for OSCAL validation and workspace checks.
  • Use official FedRAMP or OSCAL converters outside this repository when source material matches those specialized tools.
  • Use reviewed evidence packages to update control narratives and POA&M content, preserving source traceability.

Typical sequence

bash plugins/document-transform/oscal-document-workbench/scripts/extract-legacy-doc.sh input/old-ssp.docx --output workspaces/acme/extracted
bash plugins/document-transform/oscal-document-workbench/scripts/bootstrap-trestle-workspace.sh workspaces/acme --profile fedramp-moderate
bash plugins/document-transform/oscal-document-workbench/scripts/validate-oscal-package.sh workspaces/acme/trestle-workspace --output workspaces/acme/reports/validation-report.json

Validation success means the package is structurally valid. It is not an attestation, authorization, or audit opinion.

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.