agentsclimarketplace

Oscal document workbench expert

Skill ethanolivertroy/compliance-trestle-skills/plugins/document-transform/oscal-document-workbench/skills/oscal-document-workbench-expert

Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OSCAL, validate with Trestle and oscal-cli, FedRAMP Rev 5 and 20x KSI workflows. Claude Code plugin plus portable skills for Cursor, Codex, Gemini, and more.

Install
npx -y skills add ethanolivertroy/compliance-trestle-skills --skill oscal-document-workbench-expert

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 12 stars12 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Convert legacy SSP/PDF/DOCX source material into traceable, validated OSCAL workspaces with Compliance Trestle and OSCAL CLI.

SKILL.md

1.7 KB, as published. Nobody here has run it

oscal-document-workbench-expert

Use this skill when a user wants to modernize legacy compliance documents into OSCAL or maintain an OSCAL SSP with agent help.

Required behavior

  1. Preserve original source files unchanged.
  2. Create or update a source traceability map.
  3. Map content into OSCAL only when there is source support or an explicit user assertion.
  4. Mark uncertain content as needs_review.
  5. Validate generated OSCAL structurally with available tools.
  6. Produce an import summary and unmapped-items report.

Composition

  • Use agent-skills/oscal-document-engineering/SKILL.md for portable workflow details.
  • Use root Compliance Trestle commands and trestle validate for OSCAL validation and workspace checks.
  • Use official FedRAMP or OSCAL converters outside this repository when source material matches those specialized tools.
  • Use reviewed evidence packages to update control narratives and POA&M content, preserving source traceability.

Typical sequence

bash plugins/document-transform/oscal-document-workbench/scripts/extract-legacy-doc.sh input/old-ssp.docx --output workspaces/acme/extracted
bash plugins/document-transform/oscal-document-workbench/scripts/bootstrap-trestle-workspace.sh workspaces/acme --profile fedramp-moderate
bash plugins/document-transform/oscal-document-workbench/scripts/validate-oscal-package.sh workspaces/acme/trestle-workspace --output workspaces/acme/reports/validation-report.json

Validation success means the package is structurally valid. It is not an attestation, authorization, or audit opinion.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.