OSCAL Toolkit

Coming soon: The toolkit and commands below are previews, not live installation instructions.

The planned secani/oscal package will provide a typed TypeScript surface for applications and services that work with machine-readable compliance data.

Install preview

These illustrative commands show the planned package name. They will not work until the toolkit is published.

pnpm add @secani/oscal
npm install @secani/oscal
yarn add @secani/oscal
bun add @secani/oscal

Load documents

The planned loading API will accept OSCAL documents serialized as JSON, XML, or YAML and return typed model data.

import { load } from "@secani/oscal";

const document = await load("./system-security-plan.json");

Validate OSCAL

Validation is planned to report structural and model-specific issues without requiring callers to parse raw schemas themselves.

import { validate } from "@secani/oscal";

const result = await validate(document);

Transform structured data

The toolkit is intended to help applications inspect and transform OSCAL models while preserving their machine-readable structure.

Agent skills

The planned secani/oscal-skills collection will package instructions and optional scripts for coding agents working with OSCAL catalogs, profiles, validation, and conversion.