OSCAL SSP Validator

Validate OSCAL System Security Plan documents against schemas and profiles.

6|Updated Oct 25, 2025
One-click install
npx skills add https://github.com/williamzujkowski/cognitive-toolworks --skill oscal-ssp-validator-williamzujkowski
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: OSCAL SSP Validator
Source: https://github.com/williamzujkowski/cognitive-toolworks/tree/main/skills/compliance-oscal-validator
Command: npx skills add https://github.com/williamzujkowski/cognitive-toolworks --skill oscal-ssp-validator-williamzujkowski

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Validates OSCAL System Security Plan documents against the OSCAL schemas, profiles, and cross-reference requirements to ensure structural correctness and regulatory compliance across security documentation.

Core Features & Use Cases

  • Schema validation against OSCAL formats (JSON/XML/YAML)
  • Profile alignment verification and control coverage checks
  • Cross-reference integrity validation with citation tracking
  • Use Case: Streamline SSP authoring and assurance in FedRAMP, NIST, and internal compliance programs.

Quick Start

Provide a target OSCAL SSP document path and run the validator to generate a structured validation report.

Frequently Asked Questions about OSCAL SSP Validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate an OSCAL SSP document against the schema?

To validate an OSCAL SSP, provide the target document path and run the validator to check structural correctness against applicable OSCAL schemas, generating a tiered report with schema validation status, error counts, and warnings.

Can I check OSCAL profile alignment and control coverage for my SSP?

Yes, OSCAL profile alignment verification assesses control coverage, parameter validity, and cross-reference integrity when a profile is provided, producing a detailed validation report with citations for your SSP document.

What is cross-reference integrity validation in OSCAL SSPs?

Cross-reference integrity validation in OSCAL SSPs ensures that internal references between components, controls, and parameters are structurally correct and properly linked, tracking citations to verify regulatory compliance across security documentation.

Does the OSCAL SSP validator support JSON, XML, and YAML formats?

Yes, the OSCAL SSP validator performs schema validation against OSCAL formats including JSON, XML, and YAML, ensuring structural correctness and regulatory compliance across all supported file types.

How do I validate SSP documents for FedRAMP and NIST compliance programs?

You can validate SSP documents for FedRAMP and NIST compliance by running the validator with an applicable profile to assess control coverage, parameter validity, and cross-reference integrity, streamlining SSP authoring and assurance.

Why does my OSCAL SSP validation report show pinned schema versions?

Pinned OSCAL schema versions are used in validation reports to ensure determinism, meaning validation results remain consistent across runs by locking the schema version rather than using the latest potentially unstable release.