Compliance Scan — NIST 800-53 r5 + CMMC Control Checks

Audit Linux servers against NIST 800-53 r5 and CMMC controls, outputting compliance.json.

Updated Mar 20, 2026
One-click install
npx skills add https://github.com/ivanuser/cortex-server-skills --skill compliance-scan-nist-800-53-r5-cmmc-control-checks
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Compliance Scan — NIST 800-53 r5 + CMMC Control Checks
Source: https://github.com/ivanuser/cortex-server-skills/tree/main/security/compliance-scan
Command: npx skills add https://github.com/ivanuser/cortex-server-skills --skill compliance-scan-nist-800-53-r5-cmmc-control-checks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill facilitates automated, repeatable security and compliance scanning of Linux hosts, mapping findings to NIST 800-53 rev 5 and CMMC controls, and exporting results in a machine-readable format for dashboards.

Core Features & Use Cases

  • Automated, read-only scans against control families with evidence collection.
  • Produces a JSON report (compliance.json) suitable for dashboards and audits.
  • Supports point-in-time assessments and remediation planning.

Quick Start

Run the scanner on a Linux host to generate compliance.json and review the findings.

Frequently Asked Questions about Compliance Scan — NIST 800-53 r5 + CMMC Control Checks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Linux server for NIST 800-53 rev 5 and CMMC compliance?▼

The compliance scanner performs read-only scans to collect evidence against NIST 800-53 rev 5 and CMMC control families, making it safe for production environments while gathering required configuration data for security posture assessments.

What is the best way to generate machine-readable compliance reports for security dashboards?▼

This scanner applies point-in-time assessments against NIST 800-53 and CMMC controls, producing a structured JSON payload that maps findings directly to control families for remediation planning and governance reporting.

Does the NIST 800-53 compliance scan require elevated privileges to read protected Linux configuration files?▼

You need appropriate privileges to read protected configuration files, allowing the automated scanner to accurately collect evidence and map findings to NIST 800-53 rev 5 and CMMC controls without modifying the system.

Can I use this CMMC control check tool for remediation planning on Linux hosts?▼

The scanner supports point-in-time assessments and remediation planning by mapping collected evidence to NIST 800-53 rev 5 and CMMC controls, outputting a structured compliance.json file for dashboard integration and audit tracking.

What limitations exist when running a read-only Linux audit for CMMC compliance?▼

As a read-only scanner, it does not modify system configurations or auto-remediate findings, meaning it strictly identifies gaps against NIST 800-53 rev 5 and CMMC controls and exports them to compliance.json for manual remediation planning.