Compliance Check for Things Not in a Config File?

Friends,

Is there a way to do a compliance check on things that are not in a configuration file? For instance on Cisco I need to see that the SNMPv3 user is set up, so I run a command "show snmp user" and look for specific output. Also, I need to make sure the RSA key modulus is 2048 so I have to run (depending on version) "show ssh key". Is there any way to get a compliance report on something like that?

TIA,

Eric