ethanolivertroy/compliance-trestle-skills
10 subagents
Subagent
assessment-reviewerReviews OSCAL assessment plans and assessment results for completeness, correctness, and alignment with the SSP. Checks that findings are properly documented, risks are characterized, and all…compliance-reviewerReviews OSCAL compliance workspace for completeness and gaps. Analyzes controls for missing implementation responses, incomplete parameters, validation errors, and overall compliance posture. Use…control-mapperMaps and traces controls across the full OSCAL compliance lifecycle — catalogs, profiles, component definitions, SSPs, assessment plans, assessment results, and POA&M. Identifies control coverage,…data-importerInteractive assistant for converting external data (CSV, XLSX, XCCDF, Tanium scan results, CIS benchmarks) into OSCAL documents using the trestle task system. Inspects source data, helps configure…governance-enforcerInteractive assistant for setting up and enforcing document governance in a trestle workspace. Sets up governance templates, validates documents against them, identifies violations, and helps fix…pipeline-architectDesigns end-to-end compliance pipelines using Trestle: assesses existing workspace artifacts, recommends repository topology (single vs multi-repo), designs CI/CD pipelines for validation and…poam-managerManages Plan of Action and Milestones (POA&M) lifecycle — creates POA&M from assessment findings, tracks remediation progress, manages milestones, and generates status reports.ssp-authorInteractive assistant for writing System Security Plan (SSP) implementation responses. Guides users through control-by-control SSP authoring, explains control requirements, suggests implementation…validation-assistantHelps diagnose and fix Compliance Trestle validation errors. Runs validation commands, interprets error messages, identifies root causes, and guides users through fixes.workspace-explorerExplores and explains the structure of a Compliance Trestle workspace. Shows model inventory, relationships between documents, workspace health, and content summaries. Use when users want to…