oscal-ssp-validator

Validate OSCAL SSPs against NIST 800-18 Rev 1 and FedRAMP baselines.

7|2|Updated Jan 1, 2026

Search Tags:#validation #compliance #ato #oscal #ssp #fedramp #nist-800-18

Ready to run

npx skills add https://github.com/euCann/OSCAL-GRC-SKILLS --skill oscal-ssp-validator

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: oscal-ssp-validator
Source: https://github.com/euCann/OSCAL-GRC-SKILLS/tree/main/skills/oscal-ssp-validator
Command: npx skills add https://github.com/euCann/OSCAL-GRC-SKILLS --skill oscal-ssp-validator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Validates OSCAL System Security Plan (SSP) documents against NIST 800-18 Rev 1 and FedRAMP baselines to uncover missing sections, quality gaps, and remediation opportunities for ATO readiness.

Core Features & Use Cases

Structural and schema validation of OSCAL SSPs
Cross-reference integrity checks and remediation guidance
Pre-submission, continuous authorization, and SSP modernization use cases

Quick Start

Upload an OSCAL SSP in JSON or XML and run the validator to generate a remediation-ready report.

Frequently Asked Questions about oscal-ssp-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I validate an OSCAL SSP against FedRAMP and NIST 800-18 baselines?▼

Validate an OSCAL SSP by uploading the document in JSON or XML format to check it against NIST 800-18 Rev 1 and FedRAMP baselines. The validator ensures schema validity, cross-reference integrity, and produces structured remediation findings.

What is OSCAL SSP validation for ATO readiness?▼

OSCAL SSP validation for ATO readiness is the process of checking System Security Plan documents for missing sections and quality gaps against FedRAMP baselines. It generates structured findings and remediation roadmaps to support pre-submission reviews and continuous authorization.

Can I use OSCAL SSP validation for continuous ATO maintenance and modernization?▼

Yes, OSCAL SSP validation supports continuous ATO maintenance and SSP modernization by identifying quality gaps and cross-reference integrity issues. It produces structured findings and remediation guidance to keep your authorization continuously compliant.

Does the validator check OSCAL schema validity and cross-reference integrity in JSON and XML files?▼

Yes, the validator performs structural OSCAL schema validation and cross-reference integrity checks on both JSON and XML files. It catches missing elements and quality issues, delivering a remediation-ready report for NIST 800-18 and FedRAMP compliance.

What is the best way to catch missing elements in an OSCAL System Security Plan before submission?▼

The best way to catch missing elements in an OSCAL System Security Plan before submission is to run a validation check against NIST 800-18 Rev 1 and FedRAMP baselines. This process identifies quality gaps and provides structured remediation guidance.

Why does my OSCAL SSP fail FedRAMP baseline checks during pre-submission review?▼

An OSCAL SSP may fail FedRAMP baseline checks during pre-submission review due to schema invalidity, broken cross-references, or missing required sections. Running a validation check identifies these specific quality issues and generates a remediation roadmap.