Supply chain mapper
Skill maxwellokumu/okaudit-claude-skills/vendor-risk/supply-chain-mapper
Claude-ready IT audit skills for identity, compliance, appsec, privacy, network, logging, vendor risk, and audit leadership workflows
npx -y skills add maxwellokumu/okaudit-claude-skills --skill supply-chain-mapperAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 5 stars5 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Map vendor dependencies and supply chain relationships so Claude can explain concentration risk, critical dependencies, and possible circular relationships clearly.
SKILL.md
1.6 KB, as published. Nobody here has run it
Supply Chain Mapper
Use this skill when the user wants to understand vendor relationships, visualize third-party dependencies, or identify concentration and dependency risks in the supply chain.
Goal
Help Claude turn vendor dependency data into a clear picture of supply chain structure, critical relationships, and the most important third-party risk signals.
Workflow
- Confirm the vendor inventory file and the preferred output style.
- Review the listed vendors, dependency relationships, criticality, data access, and tiering details.
- Identify notable structural risks such as critical dependencies, concentration, or circular relationships.
- Summarize the supply chain in a way that makes the dependency model easy to understand.
- Present the result as a concise narrative, diagram-ready view, or both.
Inputs
Expected inputs from the bundled tool metadata:
- vendors: Path to the vendor dependency CSV.
- output: Optional output format such as mermaid, markdown, or both.
Bundled Files
- main.py contains the executable mapping logic.
- README.md provides examples and usage notes.
- skill.yaml captures the repo-native metadata for this skill.
- sample_input may contain representative vendor dependency data.
Guidance
Prioritize structural understanding. Make it easy to see which vendors are critical, where dependency chains are concentrated, and which relationships may need deeper review.