Vendor risk playbook
Skill maxwellokumu/okaudit-claude-skills/vendor-risk/vendor-risk-playbook
Claude-ready IT audit skills for identity, compliance, appsec, privacy, network, logging, vendor risk, and audit leadership workflows
npx -y skills add maxwellokumu/okaudit-claude-skills --skill vendor-risk-playbookAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 5 stars5 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Guide Claude through a structured third-party risk audit covering vendor inventory, tiering, assessment, contract review, ongoing monitoring, and reporting.
SKILL.md
1.6 KB, as published. Nobody here has run it
Vendor Risk Playbook
Use this skill when the user needs a step-by-step vendor risk audit methodology or wants help sequencing third-party review activities.
Goal
Help Claude act like a third-party risk lead by breaking the review into manageable phases and keeping the work focused on inventory quality, risk tiering, assessment depth, contractual coverage, and monitoring.
Workflow
- Identify the vendor population, audit objective, and current stage of the review.
- Select the relevant playbook step such as inventory, tiering, assessment, contract review, monitoring, or reporting.
- Outline the activities, evidence, and stakeholders needed for that stage.
- Highlight common blind spots such as weak inventories, inconsistent tiering, shallow assessments, or missing contract protections.
- Return a concise next-step plan the user can apply immediately.
Inputs
Expected inputs from the bundled tool metadata:
- step: Optional playbook step or phase to focus on.
Bundled Files
- main.py contains the executable playbook helper.
- README.md provides narrative guidance and examples.
- skill.yaml captures the repo-native metadata for this skill.
- sample_input may contain example prompts or stage definitions.
Guidance
Stay practical and risk-based. Connect vendor findings back to business dependency, contractual protection, ongoing assurance, and audit evidence needs.