Results for “vendors”

Investigate business email compromise, where impersonated executives or vendors request payments or sensitive data. Check sender details, unusual communication patterns, mailbox changes, and payment approval procedures to develop detection rules and verification controls.

• Investigating emails impersonating executives or vendors
• Reviewing requests to change vendor bank details
• Building detection rules for fraudulent payment requests

Use this skill when a company needs to decide how much assessment each supplier deserves, or asks "tier our vendors", "which suppliers are critical", "we have 200 vendors and cannot assess them all", "build a third-party risk tiering", "rank suppliers by risk" or "which vendors need a security review this year". Builds the complete supplier population from finance, single sign-on and contracts, scores each supplier on data, access and dependency, assigns a tier by the highest axis, sets the assessment depth and cycle per tier, and writes a tiered list with the reason for every score.

The English summary is being prepared. Showing the original description.

Evaluate vendor proposals, renewals, or competing offers by comparing costs, risks, performance, and business fit. Produce a structured review with total ownership costs, a recommendation, and concrete points for contract negotiations.

• Evaluate a new vendor proposal
• Decide whether to renew or replace a vendor
• Compare two vendors side by side

Check new vendors’ tax forms, banking forms, and signed contracts against a shared checklist. Record document status, draft requests for corrections, and summarize results in Slack while leaving approval and payment setup to people.

• Check documents submitted by new vendors
• Draft requests for missing or invalid documents
• Recheck a vendor’s document status

Evaluate older Wi-Fi clients and embedded devices for KRACK and FragAttacks vulnerabilities. Covers test suites, likely patch status, practical impact, and reporting findings by device, firmware version, and vulnerability identifier.

• Assessing older Wi-Fi clients
• Reviewing IoT firmware patch status
• Distinguishing KRACK and FragAttacks impacts

Use this skill when the user asks about Stripe Connect configuration, charge patterns, Dashboard access, or how to get started with Connect, is building a marketplace, platform, multi-vendor store, gig platform, or subscription platform, needs to pay out sellers, vendors, or providers, mentions split payments, revenue sharing, multi-party payments, or similar payment distribution concepts, provides a company URL or business description for a recommendation, builds SaaS that routes money between parties (for example, POS, booking, invoicing — not operational SaaS without payment routing), asks about onboarding or KYC for merchants, sellers, and vendors, mentions connected account Dashboard or responsibility configurations, or asks about payment flows, white-label payments, or embedded payments.

The English summary is being prepared. Showing the original description.

Use this skill when the user asks about Stripe Connect configuration, charge patterns, Dashboard access, or how to get started with Connect, is building a marketplace, platform, multi-vendor store, gig platform, or subscription platform, needs to pay out sellers, vendors, or providers, mentions split payments, revenue sharing, multi-party payments, or similar payment distribution concepts, provides a company URL or business description for a recommendation, builds SaaS that routes money between parties (for example, POS, booking, invoicing — not operational SaaS without payment routing), asks about onboarding or KYC for merchants, sellers, and vendors, mentions connected account Dashboard or responsibility configurations, or asks about payment flows, white-label payments, or embedded payments.

The English summary is being prepared. Showing the original description.

Evaluate, select, and contract with vendors and SaaS tools. Use this skill when comparing alternatives, running an RFP, scoring vendors against criteria, negotiating contracts, planning a switch, or assessing a vendor's risk. Triggers on vendor evaluation, RFP, vendor selection, build vs buy, SaaS evaluation, vendor scorecard, vendor comparison, contract negotiation, vendor switch, procurement. Also triggers when a renewal is coming up or when a tool isn't meeting expectations.

The English summary is being prepared. Showing the original description.

Assess IT vendors and third-party partners with multi-factor risk scoring and regulatory compliance checklists. Use when evaluating technology vendors.

The English summary is being prepared. Showing the original description.

Risk-based vendor assessment framework for IT service providers, technology vendors, and third-party partners under DORA, NIS2, GDPR. Provides three-phase process (Initial Screening / Detailed Assessment / Final Evaluation), six-dimension risk scoring (Financial/Operational/Compliance/Security/Reputational/Strategic) with weighted matrices, full DORA Art. 28-30 contractual checklist, NIS2 Art. 21(2) security measures enumeration, GDPR Art. 28 documentation checks, red flags per dimension, trigger-based review criteria, and document templates. Use when: (1) Evaluating new vendors or technology providers, (2) Conducting critical ICT third-party due diligence under DORA, (3) Performing supply chain security assessment under NIS2, (4) Creating vendor onboarding documentation, (5) Establishing ongoing vendor monitoring, (6) Assessing concentration risk, or (7) Generating executive vendor risk reports.

The English summary is being prepared. Showing the original description.

An AI analyst for buying B2B software. Investigates what vendors claim, checks the evidence, surfaces contradictions and unanswered questions, and produces a shareable Decision Brief with the questions to ask before you buy. Quick Eval by default; Deep Eval on request. Use when asked to evaluate, compare, vet, or research B2B software vendors.

The English summary is being prepared. Showing the original description.

Use this skill when a covered entity or business associate needs to know where protected health information lives and moves, or asks "map our PHI", "ePHI inventory", "HIPAA data flow diagram", "where does patient data go", "PHI flow map for the risk analysis", "which vendors need a BAA" or "do our logs contain PHI". Traces health data from where it enters, through systems, integrations, logs, backups and vendors, to where it leaves and is disposed of, records the safeguards that cover each flow and the business associate agreement behind each external one, and lists the gaps as input to the security risk analysis.

The English summary is being prepared. Showing the original description.

This skill should be used when creating RFQ (Request for Quotation) documents for software development projects to send to vendors. Use this skill when you have received vague requirements from clients and need to structure them into clear, comprehensive RFQs that enable vendors to provide accurate estimates. Supports Japanese (default) and English, with systematic requirements elicitation, clarification, and markdown-formatted output.

The English summary is being prepared. Showing the original description.

Build one spreadsheet for an event covering guests, vendors, timeline and budget, from your event brief and vendor list, and draft the vendor messages for your GO. Use for "event tracker", "plan this event", "track vendors and budget", "event spreadsheet".

The English summary is being prepared. Showing the original description.

外部のスキルをこのリポジトリにコピーして自分のスキルにする。ユーザーがスキルのURLやリポジトリ名を渡して「入れたい」「導入したい」と言ったとき、「上流を参照せずコピーしたい」と言ったとき、またはユーザーが `/import-skill` と打ったときに使う。Vendors an external Claude skill into this repository.

The English summary is being prepared. Showing the original description.

KRACK (CVE-2017-13077..082) and FragAttacks (CVE-2020-24586..588 + 26139-26147) — key reinstallation, fragmentation, and aggregation attacks against WPA2 supplicants. Covers Vanhoef's test scripts, viability against modern patched stacks (mostly mitigated post-2021), residual unpatched embedded devices and IoT vendors, and the practical limitations of these attacks in modern engagements. Use when assessing legacy supplicants, embedded clients, or vendors with poor patch cadence.

The English summary is being prepared. Showing the original description.

Organize invoices and receipts by extracting dates, vendors, amounts, and descriptions from PDFs and images. Create consistent filenames, sort copies into folders, and produce a CSV summary for accounting, expense tracking, or tax preparation.

• Sorting invoices and receipts for tax preparation
• Categorizing monthly business expenses
• Preparing a CSV summary for an accountant

Create, review, migrate, and simulate Python liquid-handling protocols for Opentrons Flex and OT-2 robots. Covers deck layout, labware, pipettes, modules, volumes, and tip policies, with checks for Opentrons App analysis and operator review before physical runs.

• Draft liquid-transfer or serial-dilution protocols
• Review deck layout, volumes, and tip changes
• Update older protocols for supported API versions

Build .NET workflows that extract text, tables, and fields from invoices, receipts, and other documents using Azure AI Document Intelligence. Covers prebuilt models, custom model creation, document classification, authentication, and result handling.

• Extract vendors, line items, and totals from invoices
• Read merchants, dates, and totals from receipts
• Extract text and table cells from documents

Find autonomous AI agents, frameworks, and tools through AgentFolio. Compare their capabilities, intended users, integrations, and deployment options to shortlist existing products or gather examples and ideas before designing an agent of your own.

• Finding existing agents before building your own
• Shortlisting agent vendors for evaluation
• Researching competitors and market gaps

Update Flask-AppBuilder in Apache Airflow’s FAB provider, including pinned versions, dependency locks, and documentation. Check compatibility tests and review copied security code, with asset and database migration updates when the upstream release requires them.

• Upgrade the FAB provider to a newer Flask-AppBuilder release
• Review upstream authentication fixes against Airflow's copied code
• Resolve compatibility failures after a dependency update

Plan technology strategy and engineering team growth with frameworks for technical debt, hiring, architecture decisions, and vendor evaluation. Use Python tools and decision templates to prioritize improvements, structure teams, and track engineering performance.

• Prioritizing technical debt reduction
• Planning hiring and engineering team structure
• Comparing technologies and vendors

Identify risks in projects, vendors, processes, and decisions, then rank them by likelihood and impact. Produce a prioritized risk register, a structured list of risks with practical mitigation actions, responsible owners, and current status.

• Assessing risks before starting a project
• Reviewing risks associated with a vendor
• Identifying potential failures in business processes

Review plans involving customer data, compliance, or production access. Examine threats, potential damage, detection, incident response, notification requirements, and vendors, then summarize whether the plan can proceed, needs mitigation, or should be blocked.

• Reviewing a feature that handles customer data
• Preparing for a SOC 2 or ISO 27001 audit
• Assessing a vendor that will access data