Supplier Risk Scorecard
Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension... Skill: Supplier Risk Scorecard Owner: archlab-space Summary: Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension... Tags: latest:0.1.2 Version history: v0.1.2 | 2026-05-28T09:51:34.956Z | user Rewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity. v0.1.0 | 2026-05-
Rank
62
Safety
84
Downloads
965
Updated
Oct 12, 2026
Version
0.1.2
Source
CLAWHUB
About
What it does, and when to use it.
Capability contract not published. No trust telemetry is available yet. 965 downloads reported by the source. Last updated 10/12/2026.
Avoid when
- Contract metadata is missing or unavailable for deterministic execution.
Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing
Public facts
Every fact links back to the source it came from.
- Vendor
- Clawhubvendor · observed Oct 12, 2026
- Protocol compatibility
- OpenClawcompatibility · observed Oct 12, 2026
- Adoption signal
- 965 downloadsadoption · observed Oct 12, 2026
- Latest release
- 0.1.2release · observed May 28, 2026
- Handshake status
- UNKNOWNsecurity
What changed
Newest first. Only changes that point at a source are listed.
Release 0.1.2release
Rewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity.
Observed May 28, 2026 · source
Install and run
Setup complexity: low.
clawhub skill install s176qz6rwtpzj9gk93r7b3jm6984ty2d:supplier-risk-scorecard- Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
- Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.
Contract: missing
curl -s "https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/snapshot"
Run-check
$0.02 USD1 measured facts are behind this paywall: success rate and latency, uptime and estimated cost, when not to use it, how to call it, benchmark scores.
Agents pay $0.02 in USDC. A card payment is $0.50, the smallest a card allows.
Documentation
CLAWHUB
25,188 characters of source documentation, loaded on request.
Extracted files
5 files captured from the source.
SKILL.md
--- name: supplier-risk-scorecard description: > Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension risk scorecard, a Low/Medium/High/Critical tier rating, and a prioritized mitigation action plan for procurement review. --- # Supplier Risk Scorecard You are a supply chain risk analyst. Your job is to guide the user through assessing a supplier's risk profile, score it across five standardized dimensions, and produce an actionable risk scorecard ready for procurement review. ## Flow Follow these phases in order. Ask one question at a time when required information is missing. Wait for the answer before continuing. --- ## Phase 1: Intake ### Step 1: Identify the Supplier Collect the following. Ask one question at a time if not provided: | Field | Why It Matters | |---|---| | Supplier name and legal entity | Anchors the assessment | | Country of incorporation / primary operations | Drives geopolitical and compliance scoring | | Category / commodity supplied | Determines criticality context | | Tier level (Tier 1 direct / Tier 2 sub-supplier) | Affects risk propagation weight | | Estimated annual spend | Sets materiality context | Do not proceed to Step 2 until supplier name and country are confirmed. ### Step 2: Collect Evidence Ask the user to share any available materials for each dimension. Accept whatever is available — a full assessment does not require all inputs. | Dimension | Useful Inputs | |---|---| | Financial Stability | Financial statements, credit ratings, news of layoffs or restructuring | | Operational Resilience | Site count, ISO 9001/45001 certifications, audit results, lead time history | | Geopolitical Exposure | Country risk indices, sanctions watch lists, trade dependency data | | Compliance & ESG | ISO 14001 or SA8000 certifications, audit findings, regulatory violations, conflict minerals declarations | | Relationship Health | On-time delivery history, defect rates, contract length, escalation history | If the user has no documents, proceed with what they describe verbally. Note evidence gaps explicitly in the output. --- ## Phase 2: Scoring ### Step 3: Score Each Dimension Rate each of the five dimensions on a 1–5 scale where **1 = very low risk** and **5 = critical risk**. For each score, cite the evidence or state "assumed from description" when no document was provided. **Scoring rubric:** | Score | Meaning | |---|---| | 1 | No material concern; strong controls or favorable context | | 2 | Minor concerns; well-managed or easily mitigated | | 3 | Moderate risk; requires monitoring and contingency planning | | 4 | Significant risk; active mitigation needed | | 5 | Critical risk; sourcing continuity threatened | **Dimension definitions:** - **Financial Stability:** Liquidity, profitability trend, credit health, restructuring signals - **Operational Resilience:** Single-site dependency, qua
README.md
# supplier-risk-scorecard Assess a supplier's risk profile across five standardized dimensions and produce a scored risk scorecard with a risk-tier rating and a prioritized mitigation action plan. ## When to use Use this skill when: - Onboarding a new supplier and need a structured risk baseline - Conducting an annual or triggered supplier review - A disruption signal (news, audit finding, geopolitical event) warrants a rapid re-assessment - Procurement or sourcing leadership needs a risk-tiered supplier ranking ## What it delivers - A completed risk scorecard table (five dimensions, each scored 1–5) - An overall risk tier: Low / Medium / High / Critical - The top three risk flags with supporting evidence - A prioritized mitigation action plan (owner, action, timeline) - An evidence-gap log noting which scores rely on assumptions ## Inputs expected | Input | Required? | |---|---| | Supplier name and legal entity | Yes | | Country of incorporation / primary operations | Yes | | Category or commodity supplied | Recommended | | Tier level (Tier 1 / Tier 2) | Recommended | | Estimated annual spend | Optional | | Supporting documents (financials, audit reports, certifications, delivery data) | Optional — skill works without them | ## Safety notes - Never fabricates financial data, audit results, or country risk scores. - Scores missing dimensions conservatively and flags every assumption explicitly. - Does not request system credentials, login access, or internal database exports. - Personal employee data in shared documents is not quoted or retained in output. - Sanctioned entities or confirmed regulatory violations are always escalated to Critical tier. ## Feedback & Contributions Found a gap or have a suggestion? [Open an issue or PR](https://github.com/archlab-space/Open-Skill-Hub/issues) — improvements are welcome.
_meta.json
{
"ownerId": "kn798vfcxrgjdt230v34k8eqf584vpwv",
"slug": "supplier-risk-scorecard",
"version": "0.1.2",
"publishedAt": 1779961894956
}CHANGELOG.md
# Changelog ## [0.1.2] - 2026-05-28 Rewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity. ## [0.1.1] - 2026-05-21 ### Added - Feedback prompt in README.md and conditional feedback section in SKILL.md ## [0.1.0] - 2026-05-19 Initial release. Adds structured five-dimension supplier risk scoring workflow with risk-tier calculation, mitigation action plan, and evidence-gap logging.
skill-card.md
## Description: Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile, producing a scored five-dimension risk scorecard, a Low/Medium/High/Critical tier rating, and a prioritized mitigation action plan for procurement review. This skill is ready for commercial/non-commercial use. ## Publisher: [archlab-space](https://clawhub.ai/user/archlab-space) ### License/Terms of Use: MIT-0 ## Use Case: Supply chain analysts, procurement managers, and sourcing teams use this skill to assess supplier risk during onboarding, periodic review, triggered reassessment, or risk-tiered supplier ranking. It guides intake, evidence collection, five-dimension scoring, risk-tier calculation, mitigation planning, and evidence-gap logging. ### Deployment Geography for Use: Global ## Known Risks and Mitigations: Risk: Supplier financials, audits, sanctions checks, and employee-related materials can contain confidential or regulated information. Mitigation: Use only authorized, business-relevant excerpts and redact unnecessary personal data, secrets, credentials, and regulated information before using the skill. Risk: Missing supplier evidence can make risk scores assumption-based and less reliable. Mitigation: Flag every assumption explicitly, log evidence gaps, and do not present assumed scores as evidence-backed conclusions. Risk: A sanctioned supplier or confirmed material regulatory violation may require immediate business escalation. Mitigation: Escalate the overall tier to Critical and recommend review by legal and procurement leadership before further action. ## Reference(s): - [ClawHub skill page](https://clawhub.ai/archlab-space/skills/supplier-risk-scorecard) ## Skill Output: **Output Type(s):** [Text, Markdown, Analysis, Guidance] **Output Format:** [Markdown scorecard with tables, ranked risk flags, recommended actions, and evidence gaps] **Output Parameters:** [1D] **Other Properties Related to Output:** [Uses five weighted supplier-risk dimensions, maps scores to Low/Medium/High/Critical tiers, and escalates Critical or High conditions under stated rules.] ## Skill Version(s): 0.1.2 (source: server release evidence and changelog, released 2026-05-28) ## Ethical Considerations: Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.
AionUi
Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!
activepieces
AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
cherry-studio
AI productivity studio with smart chat, autonomous agents, and 300+ assistants.
CopilotKit
The Frontend for Agents & Generative UI. React + Angular
Machine-readable data
The same record, as JSON, for agents and crawlers.
- Card JSON
- Facts JSON
- Snapshot JSON
- Contract JSON
- Trust JSON
- Changes JSON
- Warnings JSON
- Seen by JSON
- Disagreements JSON
{
"facts": [
{
"factKey": "vendor",
"category": "vendor",
"label": "Vendor",
"value": "Clawhub",
"href": "https://clawhub.ai/archlab-space/skills/supplier-risk-scorecard",
"sourceUrl": "https://clawhub.ai/archlab-space/skills/supplier-risk-scorecard",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-12T00:51:36.300Z",
"isPublic": true
},
{
"factKey": "protocols",
"category": "compatibility",
"label": "Protocol compatibility",
"value": "OpenClaw",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/contract",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/contract",
"sourceType": "contract",
"confidence": "medium",
"observedAt": "2026-10-12T00:51:36.300Z",
"isPublic": true
},
{
"factKey": "traction",
"category": "adoption",
"label": "Adoption signal",
"value": "965 downloads",
"href": "https://clawhub.ai/archlab-space/supplier-risk-scorecard",
"sourceUrl": "https://clawhub.ai/archlab-space/supplier-risk-scorecard",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-12T00:51:36.300Z",
"isPublic": true
},
{
"factKey": "latest_release",
"category": "release",
"label": "Latest release",
"value": "0.1.2",
"href": "https://clawhub.ai/archlab-space/supplier-risk-scorecard",
"sourceUrl": "https://clawhub.ai/archlab-space/supplier-risk-scorecard",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-05-28T09:51:34.956Z",
"isPublic": true
},
{
"factKey": "handshake_status",
"category": "security",
"label": "Handshake status",
"value": "UNKNOWN",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/trust",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/trust",
"sourceType": "trust",
"confidence": "medium",
"observedAt": null,
"isPublic": true
}
],
"events": [
{
"eventType": "release",
"title": "Release 0.1.2",
"description": "Rewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity.",
"href": "https://clawhub.ai/archlab-space/supplier-risk-scorecard",
"sourceUrl": "https://clawhub.ai/archlab-space/supplier-risk-scorecard",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-05-28T09:51:34.956Z",
"isPublic": true
}
]
}Record generated Oct 12, 2026.
For crawlers
This page is free to read. The run-check above is the only paid part, and it answers HTTP 402 until it is paid. Everything else here is public.
- One record, as JSON: card, facts, snapshot, contract, trust, changes, warnings, seen by, disagreements.
- Every agent, one feed: /.well-known/ai-catalog.json
- What this site sells, and the price: /.well-known/x402
- Paid run-check: /api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/run-check
