Compliance Scan — NIST 800-53 r5 + CMMC Control Checks

Audit Linux servers against NIST 800-53 r5 and CMMC controls, outputting compliance.json.

Updated Mar 20, 2026
One-click install
npx skills add https://github.com/ivanuser/cortex-server-skills --skill compliance-scan-nist-800-53-r5-cmmc-control-checks
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Compliance Scan — NIST 800-53 r5 + CMMC Control Checks
Source: https://github.com/ivanuser/cortex-server-skills/tree/main/security/compliance-scan
Command: npx skills add https://github.com/ivanuser/cortex-server-skills --skill compliance-scan-nist-800-53-r5-cmmc-control-checks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill facilitates automated, repeatable security and compliance scanning of Linux hosts, mapping findings to NIST 800-53 rev 5 and CMMC controls, and exporting results in a machine-readable format for dashboards.

Core Features & Use Cases

  • Automated, read-only scans against control families with evidence collection.
  • Produces a JSON report (compliance.json) suitable for dashboards and audits.
  • Supports point-in-time assessments and remediation planning.

Quick Start

Run the scanner on a Linux host to generate compliance.json and review the findings.

Frequently Asked Questions about Compliance Scan — NIST 800-53 r5 + CMMC Control Checks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Linux server for NIST 800-53 rev 5 and CMMC compliance?

The compliance scanner performs read-only scans to collect evidence against NIST 800-53 rev 5 and CMMC control families, making it safe for production environments while gathering required configuration data for security posture assessments.

What is the best way to generate machine-readable compliance reports for security dashboards?

This scanner applies point-in-time assessments against NIST 800-53 and CMMC controls, producing a structured JSON payload that maps findings directly to control families for remediation planning and governance reporting.

Does the NIST 800-53 compliance scan require elevated privileges to read protected Linux configuration files?

You need appropriate privileges to read protected configuration files, allowing the automated scanner to accurately collect evidence and map findings to NIST 800-53 rev 5 and CMMC controls without modifying the system.

Can I use this CMMC control check tool for remediation planning on Linux hosts?

The scanner supports point-in-time assessments and remediation planning by mapping collected evidence to NIST 800-53 rev 5 and CMMC controls, outputting a structured compliance.json file for dashboard integration and audit tracking.

What limitations exist when running a read-only Linux audit for CMMC compliance?

As a read-only scanner, it does not modify system configurations or auto-remediate findings, meaning it strictly identifies gaps against NIST 800-53 rev 5 and CMMC controls and exports them to compliance.json for manual remediation planning.