Skip to main content
Glama
AIops-tools

compliance-aiops

oscal_assessment_results

Convert an audit bundle into an OSCAL Assessment Results document, including a summary and explicit limitations for evidence the format cannot fully represent.

Instructions

[READ] A sealed bundle as an OSCAL 1.2.3 Assessment Results document.

Returns the document inline (writing a file is export_bundle's job) with a summary and an explicit limitations list. Three things OSCAL cannot express are handled rather than hidden: import-ap points at a back-matter resource saying no assessment plan exists; control ids are framework-native and NOT resolved against an imported catalog; and because status has only satisfied/not-satisfied, controls this tool evidences only PARTIALLY are reported satisfied with an evidence-strength prop plus remarks naming what the audit trail does not prove — the count is in summary so it cannot be skimmed past.

UUIDs are deterministic (v5, derived from the bundle's chain head), so re-exporting the same bundle produces a byte-identical document.

Args: bundle_path: Path to a bundle .json (from list_bundles).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
bundle_pathYes
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden and delivers: returns inline, includes summary and limitations, deterministic UUIDs, and three specific OSCAL limitation workarounds (import-ap point, unresolved control ids, partial satisfaction handling). This is substantial behavioral disclosure beyond the input schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is front-loaded with [READ] and the core purpose, then uses each sentence to disclose consequential behavior. The length is justified by the lack of annotations and the need to explain uncommon OSCAL limitation handling.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations, the description covers return format, summary/limitations, determinism, param origin, and edge-case behavior. Nothing critical appears missing for selecting and invoking this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% but the single parameter is described in Args: 'Path to a bundle .json (from list_bundles)'. This adds type/provenance beyond the raw string schema, though it does not elaborate further.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with '[READ] A sealed bundle as an OSCAL 1.2.3 Assessment Results document', naming a specific verb (read/convert) and resource. It distinguishes itself from export_bundle by noting writing a file is export_bundle's job.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly names export_bundle as the sibling for file writing and points to list_bundles for obtaining bundle_path. This gives clear when-to-use/when-not-to-use context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/AIops-tools/Compliance-AIops'

If you have feedback or need assistance with the MCP directory API, please join our Discord server