compliance-report-generator

To generate compliance reports from OSCAL documents, you provide your SSP, SAR, or POA&M artifacts as input, and the skill automatically produces formatted executive summaries, control-status reports, and remediation tracking outputs.

OSCAL audit reports can be generated in Markdown, HTML, JSON, and plain text formats, making them suitable for direct audits, management reviews, and integration into continuous monitoring dashboards.

Yes, you can generate an executive summary from an OSCAL SSP and SAR. The skill processes these artifacts to extract control statuses and assessment results, structuring them into formal management review documents.

The compliance report generator works strictly with user-provided OSCAL documents and enforces data provenance. It does not pull from external data sources, ensuring all generated reports rely solely on your supplied artifacts.

To track remediation progress using OSCAL POA&M files, you input the POA&M artifacts into the generator. It processes the remediation tracking data and outputs structured reports highlighting current vulnerabilities and mitigation statuses.

A limitation when generating continuous monitoring reports from OSCAL is that the output layouts and sections are predictable and configured by the user, and the skill only processes provided SSP, SAR, and POA&M artifacts without external validation.