nist-review

Validate multi-agent assessment outputs against NIST AI RMF 1.0 functions and generate a verdict JSON.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/dfirs1car1o/saas-posture --skill nist-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nist-review
Source: https://github.com/dfirs1car1o/saas-posture/tree/main/skills/nist-review
Command: npx skills add https://github.com/dfirs1car1o/saas-posture --skill nist-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the validation of AI assessment outputs against the NIST AI Risk Management Framework (RMF) 1.0, ensuring compliance and identifying potential risks.

Core Features & Use Cases

  • Automated NIST AI RMF Assessment: Evaluates AI system outputs against the GOVERN, MAP, MEASURE, and MANAGE functions of the NIST AI RMF.
  • Structured Verdict Generation: Produces a JSON output detailing the assessment status for each function and an overall verdict (clear, flag, block).
  • Use Case: After an AI system has been assessed for its security posture using tools like sscf-benchmark, this Skill can be used to automatically check its adherence to NIST AI RMF guidelines, flagging any areas requiring further attention before deployment.

Quick Start

Use the nist-review skill to assess the gap analysis and backlog JSON files and output the review results to nist_review.json.

Frequently Asked Questions about nist-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate AI system outputs against the NIST AI RMF 1.0 framework?

You validate AI system outputs against the NIST AI RMF 1.0 framework by evaluating multi-agent assessment data across the GOVERN, MAP, MEASURE, and MANAGE functions to generate a structured compliance verdict.

What is a structured NIST AI RMF assessment verdict?

A structured NIST AI RMF assessment verdict is a JSON output that details the compliance status for each core function and provides an overall determination of clear, flag, or block for AI system deployment.

How do I automate NIST AI RMF compliance checks for AI governance pipelines?

Automate NIST AI RMF compliance checks by processing gap analysis and backlog data through an AI-driven review mechanism that validates risk management pipelines against required governance functions.

Do I need OSCAL gap analysis data to perform a NIST AI risk assessment?

Yes, you need OSCAL gap analysis and backlog JSON data as required inputs to perform the NIST AI risk assessment validation and generate an accurate structured compliance verdict.

Can I test NIST AI RMF validation without making live AI review requests?

Yes, you can test NIST AI RMF validation without live AI requests by running the assessment process in dry-run mode, bypassing the GPT-driven review while still processing the framework validation logic.

When should I use an automated NIST AI RMF checker in my deployment workflow?

Use an automated NIST AI RMF checker after assessing your AI system's security posture to verify adherence to risk management guidelines and flag areas requiring attention before deployment.