# Validate Oscal Package

> Validate an OSCAL package or Compliance Trestle workspace and produce a validation report, failing loudly when required tools are missing.

- **Type:** Skill
- **Install:** `agentstack add skill-ethanolivertroy-compliance-trestle-skills-validate-oscal-package`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [ethanolivertroy](https://agentstack.voostack.com/s/ethanolivertroy)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [ethanolivertroy](https://github.com/ethanolivertroy)
- **Source:** https://github.com/ethanolivertroy/compliance-trestle-skills/tree/main/.cursor/skills/validate-oscal-package

## Install

```sh
agentstack add skill-ethanolivertroy-compliance-trestle-skills-validate-oscal-package
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Validate OSCAL Package

Validate an OSCAL package or Trestle workspace from Cursor.

## Read first

- `plugins/document-transform/oscal-document-workbench/commands/validate-oscal-package.md`
- `agent-skills/oscal-document-engineering/references/oscal-validation.md`
- `commands/workspace/validate.md`

## Run

```bash
bash plugins/document-transform/oscal-document-workbench/scripts/validate-oscal-package.sh  --output /reports/validation-report.json
```

For a Trestle workspace without the workbench wrapper:

```bash
trestle validate -a
```

Or use the repo helper:

```bash
bash scripts/trestle-workflow.sh validate 
```

## Report requirements

- Record validator output or a documented skipped/missing-tool status.
- Do not claim validation passed if Trestle or OSCAL CLI was unavailable unless the user accepted partial validation.
- Distinguish structural validation from compliance effectiveness or authorization.

## After assemble/import/merge/create/split

If the user recently ran `trestle assemble`, `trestle import`, `trestle merge`, `trestle create`, or `trestle split`, recommend targeted validation such as:

```bash
trestle validate -t  -n 
```

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [ethanolivertroy](https://github.com/ethanolivertroy)
- **Source:** [ethanolivertroy/compliance-trestle-skills](https://github.com/ethanolivertroy/compliance-trestle-skills)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-ethanolivertroy-compliance-trestle-skills-validate-oscal-package
- Seller: https://agentstack.voostack.com/s/ethanolivertroy
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.