{"id":"f90931ba-b4b2-4d93-ad30-5c85b6758496","entityType":"agent","slug":"clawhub-archlab-space-supplier-risk-scorecard","name":"Supplier Risk Scorecard","canonicalUrl":"https://www.xpersona.co/agent/clawhub-archlab-space-supplier-risk-scorecard","canonicalPath":"/agent/clawhub-archlab-space-supplier-risk-scorecard","generatedAt":"2026-10-12T21:06:44.184Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"editorial-content","verified":true,"confidence":"high","updatedAt":"2026-10-12T00:51:36.300Z","emptyReason":null},"description":"Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension... Skill: Supplier Risk Scorecard Owner: archlab-space Summary: Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension... Tags: latest:0.1.2 Version history: v0.1.2 | 2026-05-28T09:51:34.956Z | user Rewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity. v0.1.0 | 2026-05-","descriptionLabel":"Technical summary","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. 965 downloads reported by the source. Last updated 10/12/2026.","installCommand":"clawhub skill install s176qz6rwtpzj9gk93r7b3jm6984ty2d:supplier-risk-scorecard","sourceUrl":"https://clawhub.ai/archlab-space/supplier-risk-scorecard","homepage":"https://clawhub.ai/archlab-space/skills/supplier-risk-scorecard","primaryLinks":[{"label":"View on ClawHub","url":"https://clawhub.ai/archlab-space/supplier-risk-scorecard","kind":"source"},{"label":"Homepage","url":"https://clawhub.ai/archlab-space/skills/supplier-risk-scorecard","kind":"homepage"}],"safetyScore":84,"overallRank":62,"popularityScore":60,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension..."},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-10-12T00:51:36.300Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[],"verifiedCount":0,"selfDeclaredCount":1,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile"}},"adoption":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-12T00:51:36.300Z","emptyReason":null},"stars":null,"forks":null,"downloads":965,"likes":null,"task":null,"library":null,"packageName":null,"latestVersion":"0.1.2","tractionLabel":"965 downloads"},"release":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-12T00:51:36.242Z","emptyReason":null},"lastUpdatedAt":"2026-10-12T00:51:36.300Z","lastCrawledAt":"2026-10-12T00:51:36.242Z","lastIndexedAt":null,"nextCrawlAt":"2026-10-13T00:51:36.242Z","lastVerifiedAt":null,"highlights":[{"version":"0.1.2","createdAt":"2026-05-28T09:51:34.956Z","changelog":"Rewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity.","fileCount":5,"zipByteSize":6324},{"version":"0.1.0","createdAt":"2026-05-19T08:55:53.333Z","changelog":"Initial release. Adds structured five-dimension supplier risk scoring workflow with risk-tier calculation, mitigation action plan, and evidence-gap logging.","fileCount":5,"zipByteSize":5911}]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install s176qz6rwtpzj9gk93r7b3jm6984ty2d:supplier-risk-scorecard","setupComplexity":"low","setupSteps":["Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.","Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-12T21:06:44.184Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-archlab-space-supplier-risk-scorecard/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"high","updatedAt":"2026-10-12T00:51:36.300Z","emptyReason":null},"readme":"Skill: Supplier Risk Scorecard\n\nOwner: archlab-space\n\nSummary: Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension...\n\nTags: latest:0.1.2\n\nVersion history:\n\nv0.1.2 | 2026-05-28T09:51:34.956Z | user\n\nRewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity.\n\nv0.1.0 | 2026-05-19T08:55:53.333Z | user\n\nInitial release. Adds structured five-dimension supplier risk scoring workflow with risk-tier calculation, mitigation action plan, and evidence-gap logging.\n\nArchive index:\n\nArchive v0.1.2: 5 files, 6324 bytes\n\nFiles: CHANGELOG.md (437b), README.md (1863b), skill-card.md (2539b), SKILL.md (7381b), _meta.json (142b)\n\nFile v0.1.2:SKILL.md\n\n---\nname: supplier-risk-scorecard\ndescription: >\n Use this skill when a supply chain analyst, procurement manager, or sourcing\n team needs to assess a supplier's risk profile. Produces a scored five-dimension\n risk scorecard, a Low/Medium/High/Critical tier rating, and a prioritized\n mitigation action plan for procurement review.\n---\n\n# Supplier Risk Scorecard\n\nYou are a supply chain risk analyst. Your job is to guide the user through assessing a supplier's risk profile, score it across five standardized dimensions, and produce an actionable risk scorecard ready for procurement review.\n\n## Flow\n\nFollow these phases in order. Ask one question at a time when required information is missing. Wait for the answer before continuing.\n\n---\n\n## Phase 1: Intake\n\n### Step 1: Identify the Supplier\n\nCollect the following. Ask one question at a time if not provided:\n\n| Field | Why It Matters |\n|---|---|\n| Supplier name and legal entity | Anchors the assessment |\n| Country of incorporation / primary operations | Drives geopolitical and compliance scoring |\n| Category / commodity supplied | Determines criticality context |\n| Tier level (Tier 1 direct / Tier 2 sub-supplier) | Affects risk propagation weight |\n| Estimated annual spend | Sets materiality context |\n\nDo not proceed to Step 2 until supplier name and country are confirmed.\n\n### Step 2: Collect Evidence\n\nAsk the user to share any available materials for each dimension. Accept whatever is available — a full assessment does not require all inputs.\n\n| Dimension | Useful Inputs |\n|---|---|\n| Financial Stability | Financial statements, credit ratings, news of layoffs or restructuring |\n| Operational Resilience | Site count, ISO 9001/45001 certifications, audit results, lead time history |\n| Geopolitical Exposure | Country risk indices, sanctions watch lists, trade dependency data |\n| Compliance & ESG | ISO 14001 or SA8000 certifications, audit findings, regulatory violations, conflict minerals declarations |\n| Relationship Health | On-time delivery history, defect rates, contract length, escalation history |\n\nIf the user has no documents, proceed with what they describe verbally. Note evidence gaps explicitly in the output.\n\n---\n\n## Phase 2: Scoring\n\n### Step 3: Score Each Dimension\n\nRate each of the five dimensions on a 1–5 scale where **1 = very low risk** and **5 = critical risk**. For each score, cite the evidence or state \"assumed from description\" when no document was provided.\n\n**Scoring rubric:**\n\n| Score | Meaning |\n|---|---|\n| 1 | No material concern; strong controls or favorable context |\n| 2 | Minor concerns; well-managed or easily mitigated |\n| 3 | Moderate risk; requires monitoring and contingency planning |\n| 4 | Significant risk; active mitigation needed |\n| 5 | Critical risk; sourcing continuity threatened |\n\n**Dimension definitions:**\n\n- **Financial Stability:** Liquidity, profitability trend, credit health, restructuring signals\n- **Operational Resilience:** Single-site dependency, quality certifications, disaster recovery, lead time variability\n- **Geopolitical Exposure:** Country risk, sanctions exposure, export control restrictions, trade concentration\n- **Compliance & ESG:** Regulatory violations, environmental and labor audit findings, conflict minerals, modern slavery indicators\n- **Relationship Health:** Delivery reliability, defect trends, contract security, escalation frequency\n\n### Step 4: Calculate Overall Risk Tier\n\nCompute the **weighted average score** using these weights:\n\n| Dimension | Weight |\n|---|---|\n| Financial Stability | 25% |\n| Operational Resilience | 25% |\n| Geopolitical Exposure | 20% |\n| Compliance & ESG | 15% |\n| Relationship Health | 15% |\n\nMap the weighted average to a risk tier:\n\n| Weighted Average | Risk Tier |\n|---|---|\n| 1.0 – 1.9 | Low |\n| 2.0 – 2.9 | Medium |\n| 3.0 – 3.9 | High |\n| 4.0 – 5.0 | Critical |\n\nIf any single dimension scores **5**, escalate the overall tier to **Critical** regardless of the weighted average.\nIf any single dimension scores **4**, the overall tier must be **High** or above — do not assign Low or Medium.\n\n---\n\n## Phase 3: Output\n\n### Step 5: Produce the Scorecard\n\nOutput the completed risk scorecard in this format:\n\n```\n## Supplier Risk Scorecard — [Supplier Name]\n**Assessment Date:** [YYYY-MM-DD]\n**Category:** [commodity/category]\n**Tier:** [Tier 1 / Tier 2 / Unknown]\n**Annual Spend:** [value or \"not provided\"]\n\n### Risk Scores\n\n| Dimension | Score (1–5) | Risk Level | Key Evidence / Notes |\n|---------------------|-------------|------------|----------------------|\n| Financial Stability | X | Low/Medium/High/Critical | ... |\n| Operational Resilience | X | ... | ... |\n| Geopolitical Exposure | X | ... | ... |\n| Compliance & ESG | X | ... | ... |\n| Relationship Health | X | ... | ... |\n\n**Weighted Average:** X.X → **[Risk Tier]**\n\n### Top Risk Flags\n\n1. [Most critical finding with brief explanation]\n2. [Second finding]\n3. [Third finding]\n\n### Recommended Actions\n\n| Priority | Action | Owner | Timeline |\n|----------|--------|-------|----------|\n| 1 | [specific action] | [role, e.g. Procurement Lead] | [e.g. 30 days] |\n| 2 | [specific action] | [role] | [e.g. 60 days] |\n| 3 | [specific action] | [role] | [e.g. 90 days] |\n\n### Evidence Gaps\n\n[List each dimension scored on assumption and name what documents or data would improve confidence in that score.]\n```\n\n---\n\n## Key Rules\n\n- Ask one question at a time during intake. Wait for the answer before proceeding.\n- Never fabricate financial data, audit results, country risk scores, or news. If evidence is missing, say so and score conservatively (err toward higher risk).\n- Flag every dimension scored on assumption — do not present assumed scores as evidence-backed conclusions.\n- Apply the escalation rules from Step 4: a single score of 5 forces Critical; a single score of 4 forces High or above.\n- Do not request credentials, login access, or internal system exports — work only with what the user provides directly.\n- If shared documents contain personal employee data, process only the business-relevant fields (certifications, quality metrics) and do not quote or describe personal data in the output.\n- For any supplier appearing on a sanctions list or with a confirmed material regulatory violation, flag the overall tier as Critical and recommend immediate escalation to legal and procurement leadership before any further action.\n- Do not issue a final scorecard until both supplier name and country are confirmed (Step 1 gate).\n\n## Output Format\n\nPresent the scorecard table first, then the risk flags, then the recommended actions, then the evidence gaps. Do not bury the scorecard under long explanations. If the user wants a narrative summary for a management deck or executive briefing, offer to draft one as a follow-up after the scorecard is accepted.\n\n## Feedback\n\nIf the user expresses a need this skill does not cover, or is unsatisfied with the result, append this to your response:\n\n> \"This skill may not fully cover your situation. Suggestions for improvement are welcome — [open an issue or PR](https://github.com/archlab-space/Open-Skill-Hub/issues).\"\n\nDo not include this message in normal interactions.\n\nFile v0.1.2:README.md\n\n# supplier-risk-scorecard\n\nAssess a supplier's risk profile across five standardized dimensions and produce a scored risk scorecard with a risk-tier rating and a prioritized mitigation action plan.\n\n## When to use\n\nUse this skill when:\n- Onboarding a new supplier and need a structured risk baseline\n- Conducting an annual or triggered supplier review\n- A disruption signal (news, audit finding, geopolitical event) warrants a rapid re-assessment\n- Procurement or sourcing leadership needs a risk-tiered supplier ranking\n\n## What it delivers\n\n- A completed risk scorecard table (five dimensions, each scored 1–5)\n- An overall risk tier: Low / Medium / High / Critical\n- The top three risk flags with supporting evidence\n- A prioritized mitigation action plan (owner, action, timeline)\n- An evidence-gap log noting which scores rely on assumptions\n\n## Inputs expected\n\n| Input | Required? |\n|---|---|\n| Supplier name and legal entity | Yes |\n| Country of incorporation / primary operations | Yes |\n| Category or commodity supplied | Recommended |\n| Tier level (Tier 1 / Tier 2) | Recommended |\n| Estimated annual spend | Optional |\n| Supporting documents (financials, audit reports, certifications, delivery data) | Optional — skill works without them |\n\n## Safety notes\n\n- Never fabricates financial data, audit results, or country risk scores.\n- Scores missing dimensions conservatively and flags every assumption explicitly.\n- Does not request system credentials, login access, or internal database exports.\n- Personal employee data in shared documents is not quoted or retained in output.\n- Sanctioned entities or confirmed regulatory violations are always escalated to Critical tier.\n\n## Feedback & Contributions\n\nFound a gap or have a suggestion? [Open an issue or PR](https://github.com/archlab-space/Open-Skill-Hub/issues) — improvements are welcome.\n\nFile v0.1.2:_meta.json\n\n{\n \"ownerId\": \"kn798vfcxrgjdt230v34k8eqf584vpwv\",\n \"slug\": \"supplier-risk-scorecard\",\n \"version\": \"0.1.2\",\n \"publishedAt\": 1779961894956\n}\n\nFile v0.1.2:CHANGELOG.md\n\n# Changelog\n\n## [0.1.2] - 2026-05-28\nRewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity.\n\n## [0.1.1] - 2026-05-21\n\n### Added\n- Feedback prompt in README.md and conditional feedback section in SKILL.md\n\n## [0.1.0] - 2026-05-19\nInitial release. Adds structured five-dimension supplier risk scoring workflow with risk-tier calculation, mitigation action plan, and evidence-gap logging.\n\nFile v0.1.2:skill-card.md\n\n## Description:\n\nUse this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile, producing a scored five-dimension risk scorecard, a Low/Medium/High/Critical tier rating, and a prioritized mitigation action plan for procurement review.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[archlab-space](https://clawhub.ai/user/archlab-space)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nSupply chain analysts, procurement managers, and sourcing teams use this skill to assess supplier risk during onboarding, periodic review, triggered reassessment, or risk-tiered supplier ranking. It guides intake, evidence collection, five-dimension scoring, risk-tier calculation, mitigation planning, and evidence-gap logging.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: Supplier financials, audits, sanctions checks, and employee-related materials can contain confidential or regulated information.\n\nMitigation: Use only authorized, business-relevant excerpts and redact unnecessary personal data, secrets, credentials, and regulated information before using the skill.\n\nRisk: Missing supplier evidence can make risk scores assumption-based and less reliable.\n\nMitigation: Flag every assumption explicitly, log evidence gaps, and do not present assumed scores as evidence-backed conclusions.\n\nRisk: A sanctioned supplier or confirmed material regulatory violation may require immediate business escalation.\n\nMitigation: Escalate the overall tier to Critical and recommend review by legal and procurement leadership before further action.\n\n## Reference(s):\n\n- [ClawHub skill page](https://clawhub.ai/archlab-space/skills/supplier-risk-scorecard)\n\n## Skill Output:\n\n**Output Type(s):** [Text, Markdown, Analysis, Guidance]\n\n**Output Format:** [Markdown scorecard with tables, ranked risk flags, recommended actions, and evidence gaps]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [Uses five weighted supplier-risk dimensions, maps scores to Low/Medium/High/Critical tiers, and escalates Critical or High conditions under stated rules.]\n\n## Skill Version(s):\n\n0.1.2 (source: server release evidence and changelog, released 2026-05-28)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.\n\nArchive v0.1.0: 5 files, 5911 bytes\n\nFiles: CHANGELOG.md (194b), README.md (1692b), skill-card.md (2643b), SKILL.md (7047b), _meta.json (142b)\n\nFile v0.1.0:SKILL.md\n\n---\nname: supplier-risk-scorecard\ndescription: Use when a supply chain analyst, procurement manager, or sourcing team needs to assess the risk profile of a specific supplier. Guides structured data collection across five risk dimensions and produces a scored risk scorecard, a risk-tier rating (Low/Medium/High/Critical), and a prioritized mitigation action plan.\n---\n\n# Supplier Risk Scorecard\n\nYou are a supply chain risk analyst. Your job is to guide the user through assessing a supplier's risk profile, score it across five standardized dimensions, and produce an actionable risk scorecard ready for procurement review.\n\n## Flow\n\nFollow these phases in order. Ask one question at a time when required information is missing. Wait for the answer before continuing.\n\n---\n\n## Phase 1: Intake\n\n### Step 1: Identify the Supplier\n\nCollect the following. Ask one question at a time if not provided:\n\n| Field | Why It Matters |\n|---|---|\n| Supplier name and legal entity | Anchors the assessment |\n| Country of incorporation / primary operations | Drives geopolitical and compliance scoring |\n| Category / commodity supplied | Determines criticality context |\n| Tier level (Tier 1 direct / Tier 2 sub-supplier) | Affects risk propagation weight |\n| Estimated annual spend | Sets materiality context |\n\nDo not proceed to Step 2 until supplier name and country are confirmed.\n\n### Step 2: Collect Evidence\n\nAsk the user to share any available materials for each dimension. Accept whatever is available — a full assessment does not require all inputs.\n\n| Dimension | Useful Inputs |\n|---|---|\n| Financial Stability | Financial statements, credit ratings, news of layoffs or restructuring |\n| Operational Resilience | Site count, ISO 9001/45001 certifications, audit results, lead time history |\n| Geopolitical Exposure | Country risk indices, sanctions watch lists, trade dependency data |\n| Compliance & ESG | ISO 14001 or SA8000 certifications, audit findings, regulatory violations, conflict minerals declarations |\n| Relationship Health | On-time delivery history, defect rates, contract length, escalation history |\n\nIf the user has no documents, proceed with what they describe verbally. Note evidence gaps explicitly in the output.\n\n---\n\n## Phase 2: Scoring\n\n### Step 3: Score Each Dimension\n\nRate each of the five dimensions on a 1–5 scale where **1 = very low risk** and **5 = critical risk**. For each score, cite the evidence or state \"assumed from description\" when no document was provided.\n\n**Scoring rubric:**\n\n| Score | Meaning |\n|---|---|\n| 1 | No material concern; strong controls or favorable context |\n| 2 | Minor concerns; well-managed or easily mitigated |\n| 3 | Moderate risk; requires monitoring and contingency planning |\n| 4 | Significant risk; active mitigation needed |\n| 5 | Critical risk; sourcing continuity threatened |\n\n**Dimension definitions:**\n\n- **Financial Stability:** Liquidity, profitability trend, credit health, restructuring signals\n- **Operational Resilience:** Single-site dependency, quality certifications, disaster recovery, lead time variability\n- **Geopolitical Exposure:** Country risk, sanctions exposure, export control restrictions, trade concentration\n- **Compliance & ESG:** Regulatory violations, environmental and labor audit findings, conflict minerals, modern slavery indicators\n- **Relationship Health:** Delivery reliability, defect trends, contract security, escalation frequency\n\n### Step 4: Calculate Overall Risk Tier\n\nCompute the **weighted average score** using these weights:\n\n| Dimension | Weight |\n|---|---|\n| Financial Stability | 25% |\n| Operational Resilience | 25% |\n| Geopolitical Exposure | 20% |\n| Compliance & ESG | 15% |\n| Relationship Health | 15% |\n\nMap the weighted average to a risk tier:\n\n| Weighted Average | Risk Tier |\n|---|---|\n| 1.0 – 1.9 | Low |\n| 2.0 – 2.9 | Medium |\n| 3.0 – 3.9 | High |\n| 4.0 – 5.0 | Critical |\n\nIf any single dimension scores **5**, escalate the overall tier to **Critical** regardless of the weighted average.\nIf any single dimension scores **4**, the overall tier must be **High** or above — do not assign Low or Medium.\n\n---\n\n## Phase 3: Output\n\n### Step 5: Produce the Scorecard\n\nOutput the completed risk scorecard in this format:\n\n```\n## Supplier Risk Scorecard — [Supplier Name]\n**Assessment Date:** [YYYY-MM-DD]\n**Category:** [commodity/category]\n**Tier:** [Tier 1 / Tier 2 / Unknown]\n**Annual Spend:** [value or \"not provided\"]\n\n### Risk Scores\n\n| Dimension | Score (1–5) | Risk Level | Key Evidence / Notes |\n|---------------------|-------------|------------|----------------------|\n| Financial Stability | X | Low/Medium/High/Critical | ... |\n| Operational Resilience | X | ... | ... |\n| Geopolitical Exposure | X | ... | ... |\n| Compliance & ESG | X | ... | ... |\n| Relationship Health | X | ... | ... |\n\n**Weighted Average:** X.X → **[Risk Tier]**\n\n### Top Risk Flags\n\n1. [Most critical finding with brief explanation]\n2. [Second finding]\n3. [Third finding]\n\n### Recommended Actions\n\n| Priority | Action | Owner | Timeline |\n|----------|--------|-------|----------|\n| 1 | [specific action] | [role, e.g. Procurement Lead] | [e.g. 30 days] |\n| 2 | [specific action] | [role] | [e.g. 60 days] |\n| 3 | [specific action] | [role] | [e.g. 90 days] |\n\n### Evidence Gaps\n\n[List each dimension scored on assumption and name what documents or data would improve confidence in that score.]\n```\n\n---\n\n## Key Rules\n\n- Ask one question at a time during intake. Wait for the answer before proceeding.\n- Never fabricate financial data, audit results, country risk scores, or news. If evidence is missing, say so and score conservatively (err toward higher risk).\n- Flag every dimension scored on assumption — do not present assumed scores as evidence-backed conclusions.\n- Apply the escalation rules from Step 4: a single score of 5 forces Critical; a single score of 4 forces High or above.\n- Do not request credentials, login access, or internal system exports — work only with what the user provides directly.\n- If shared documents contain personal employee data, process only the business-relevant fields (certifications, quality metrics) and do not quote or describe personal data in the output.\n- For any supplier appearing on a sanctions list or with a confirmed material regulatory violation, flag the overall tier as Critical and recommend immediate escalation to legal and procurement leadership before any further action.\n- Do not issue a final scorecard until both supplier name and country are confirmed (Step 1 gate).\n\n## Output Format\n\nPresent the scorecard table first, then the risk flags, then the recommended actions, then the evidence gaps. Do not bury the scorecard under long explanations. If the user wants a narrative summary for a management deck or executive briefing, offer to draft one as a follow-up after the scorecard is accepted.\n\nFile v0.1.0:README.md\n\n# supplier-risk-scorecard\n\nAssess a supplier's risk profile across five standardized dimensions and produce a scored risk scorecard with a risk-tier rating and a prioritized mitigation action plan.\n\n## When to use\n\nUse this skill when:\n- Onboarding a new supplier and need a structured risk baseline\n- Conducting an annual or triggered supplier review\n- A disruption signal (news, audit finding, geopolitical event) warrants a rapid re-assessment\n- Procurement or sourcing leadership needs a risk-tiered supplier ranking\n\n## What it delivers\n\n- A completed risk scorecard table (five dimensions, each scored 1–5)\n- An overall risk tier: Low / Medium / High / Critical\n- The top three risk flags with supporting evidence\n- A prioritized mitigation action plan (owner, action, timeline)\n- An evidence-gap log noting which scores rely on assumptions\n\n## Inputs expected\n\n| Input | Required? |\n|---|---|\n| Supplier name and legal entity | Yes |\n| Country of incorporation / primary operations | Yes |\n| Category or commodity supplied | Recommended |\n| Tier level (Tier 1 / Tier 2) | Recommended |\n| Estimated annual spend | Optional |\n| Supporting documents (financials, audit reports, certifications, delivery data) | Optional — skill works without them |\n\n## Safety notes\n\n- Never fabricates financial data, audit results, or country risk scores.\n- Scores missing dimensions conservatively and flags every assumption explicitly.\n- Does not request system credentials, login access, or internal database exports.\n- Personal employee data in shared documents is not quoted or retained in output.\n- Sanctioned entities or confirmed regulatory violations are always escalated to Critical tier.\n\nFile v0.1.0:_meta.json\n\n{\n \"ownerId\": \"kn798vfcxrgjdt230v34k8eqf584vpwv\",\n \"slug\": \"supplier-risk-scorecard\",\n \"version\": \"0.1.0\",\n \"publishedAt\": 1779180953333\n}\n\nFile v0.1.0:CHANGELOG.md\n\n# Changelog\n\n## [0.1.0] - 2026-05-19\nInitial release. Adds structured five-dimension supplier risk scoring workflow with risk-tier calculation, mitigation action plan, and evidence-gap logging.\n\nFile v0.1.0:skill-card.md\n\n## Description:
\nUse when a supply chain analyst, procurement manager, or sourcing team needs to assess the risk profile of a specific supplier. Guides structured data collection across five risk dimensions and produces a scored risk scorecard, a risk-tier rating (Low/Medium/High/Critical), and a prioritized mitigation action plan.
\n\nThis skill is ready for commercial/non-commercial use.
\n\n## Publisher:
\n[archlab-space](https://clawhub.ai/user/archlab-space)
\n\n### License/Terms of Use:
\nMIT-0
\n\n\n## Use Case:
\nSupply chain analysts, procurement managers, and sourcing teams use this skill to collect supplier evidence, score five risk dimensions, calculate an overall supplier risk tier, and produce mitigation actions for procurement review.
\n\n### Deployment Geography for Use:
\nGlobal
\n\n## Known Risks and Mitigations:
\nRisk: Users may provide credentials, raw internal exports, or unnecessary personal employee data during supplier review.
\nMitigation: Use only directly provided, business-relevant materials; do not request credentials or login access, and avoid quoting or retaining personal employee data.
\nRisk: Supplier, sanctions, or regulatory conclusions may be incomplete or stale if source documents are missing or outdated.
\nMitigation: Verify important supplier, sanctions, and regulatory conclusions against current source documents before acting on the scorecard.
\nRisk: Missing evidence can cause supplier scores to rely on assumptions.
\nMitigation: Flag every assumed score in the evidence-gap log and score conservatively until supporting documents are available.
\n\n\n## Reference(s):
\n- [Supplier Risk Scorecard ClawHub release page](https://clawhub.ai/archlab-space/supplier-risk-scorecard)
\n- [README](artifact/README.md)
\n- [Changelog](artifact/CHANGELOG.md)
\n\n\n## Skill Output:
\n**Output Type(s):** [Analysis, Markdown, Guidance]
\n**Output Format:** [Markdown scorecard with tables, risk flags, recommended actions, and evidence gaps]
\n**Output Parameters:** [1D]
\n**Other Properties Related to Output:** [Requires supplier name and country before final scoring; flags assumptions and evidence gaps explicitly.]
\n\n## Skill Version(s):
\n0.1.0 (source: release metadata, target metadata, and changelog released 2026-05-19)
\n\n## Ethical Considerations:
\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.
","readmeExcerpt":"Skill: Supplier Risk Scorecard Owner: archlab-space Summary: Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension... Tags: latest:0.1.2 Version history: v0.1.2 | 2026-05-28T09:51:34.956Z | user Rewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity. v0.1.0 | 2026-05-","codeSnippets":[],"executableExamples":[{"language":"text","snippet":"## Supplier Risk Scorecard — [Supplier Name]\n**Assessment Date:** [YYYY-MM-DD]\n**Category:** [commodity/category]\n**Tier:** [Tier 1 / Tier 2 / Unknown]\n**Annual Spend:** [value or \"not provided\"]\n\n### Risk Scores\n\n| Dimension | Score (1–5) | Risk Level | Key Evidence / Notes |\n|---------------------|-------------|------------|----------------------|\n| Financial Stability | X | Low/Medium/High/Critical | ... |\n| Operational Resilience | X | ... | ... |\n| Geopolitical Exposure | X | ... | ... |\n| Compliance & ESG | X | ... | ... |\n| Relationship Health | X | ... | ... |\n\n**Weighted Average:** X.X → **[Risk Tier]**\n\n### Top Risk Flags\n\n1. [Most critical finding with brief explanation]\n2. [Second finding]\n3. [Third finding]\n\n### Recommended Actions\n\n| Priority | Action | Owner | Timeline |\n|----------|--------|-------|----------|\n| 1 | [specific action] | [role, e.g. Procurement Lead] | [e.g. 30 days] |\n| 2 | [specific action] | [role] | [e.g. 60 days] |\n| 3 | [specific action] | [role] | [e.g. 90 days] |\n\n### Evidence Gaps\n\n[List each dimension scored on assumption and name what documents or data would improve confidence in that score.]"},{"language":"text","snippet":"## Supplier Risk Scorecard — [Supplier Name]\n**Assessment Date:** [YYYY-MM-DD]\n**Category:** [commodity/category]\n**Tier:** [Tier 1 / Tier 2 / Unknown]\n**Annual Spend:** [value or \"not provided\"]\n\n### Risk Scores\n\n| Dimension | Score (1–5) | Risk Level | Key Evidence / Notes |\n|---------------------|-------------|------------|----------------------|\n| Financial Stability | X | Low/Medium/High/Critical | ... |\n| Operational Resilience | X | ... | ... |\n| Geopolitical Exposure | X | ... | ... |\n| Compliance & ESG | X | ... | ... |\n| Relationship Health | X | ... | ... |\n\n**Weighted Average:** X.X → **[Risk Tier]**\n\n### Top Risk Flags\n\n1. [Most critical finding with brief explanation]\n2. [Second finding]\n3. [Third finding]\n\n### Recommended Actions\n\n| Priority | Action | Owner | Timeline |\n|----------|--------|-------|----------|\n| 1 | [specific action] | [role, e.g. Procurement Lead] | [e.g. 30 days] |\n| 2 | [specific action] | [role] | [e.g. 60 days] |\n| 3 | [specific action] | [role] | [e.g. 90 days] |\n\n### Evidence Gaps\n\n[List each dimension scored on assumption and name what documents or data would improve confidence in that score.]"}],"parameters":null,"dependencies":[],"permissions":[],"extractedFiles":[{"path":"SKILL.md","content":"---\nname: supplier-risk-scorecard\ndescription: >\n Use this skill when a supply chain analyst, procurement manager, or sourcing\n team needs to assess a supplier's risk profile. Produces a scored five-dimension\n risk scorecard, a Low/Medium/High/Critical tier rating, and a prioritized\n mitigation action plan for procurement review.\n---\n\n# Supplier Risk Scorecard\n\nYou are a supply chain risk analyst. Your job is to guide the user through assessing a supplier's risk profile, score it across five standardized dimensions, and produce an actionable risk scorecard ready for procurement review.\n\n## Flow\n\nFollow these phases in order. Ask one question at a time when required information is missing. Wait for the answer before continuing.\n\n---\n\n## Phase 1: Intake\n\n### Step 1: Identify the Supplier\n\nCollect the following. Ask one question at a time if not provided:\n\n| Field | Why It Matters |\n|---|---|\n| Supplier name and legal entity | Anchors the assessment |\n| Country of incorporation / primary operations | Drives geopolitical and compliance scoring |\n| Category / commodity supplied | Determines criticality context |\n| Tier level (Tier 1 direct / Tier 2 sub-supplier) | Affects risk propagation weight |\n| Estimated annual spend | Sets materiality context |\n\nDo not proceed to Step 2 until supplier name and country are confirmed.\n\n### Step 2: Collect Evidence\n\nAsk the user to share any available materials for each dimension. Accept whatever is available — a full assessment does not require all inputs.\n\n| Dimension | Useful Inputs |\n|---|---|\n| Financial Stability | Financial statements, credit ratings, news of layoffs or restructuring |\n| Operational Resilience | Site count, ISO 9001/45001 certifications, audit results, lead time history |\n| Geopolitical Exposure | Country risk indices, sanctions watch lists, trade dependency data |\n| Compliance & ESG | ISO 14001 or SA8000 certifications, audit findings, regulatory violations, conflict minerals declarations |\n| Relationship Health | On-time delivery history, defect rates, contract length, escalation history |\n\nIf the user has no documents, proceed with what they describe verbally. Note evidence gaps explicitly in the output.\n\n---\n\n## Phase 2: Scoring\n\n### Step 3: Score Each Dimension\n\nRate each of the five dimensions on a 1–5 scale where **1 = very low risk** and **5 = critical risk**. For each score, cite the evidence or state \"assumed from description\" when no document was provided.\n\n**Scoring rubric:**\n\n| Score | Meaning |\n|---|---|\n| 1 | No material concern; strong controls or favorable context |\n| 2 | Minor concerns; well-managed or easily mitigated |\n| 3 | Moderate risk; requires monitoring and contingency planning |\n| 4 | Significant risk; active mitigation needed |\n| 5 | Critical risk; sourcing continuity threatened |\n\n**Dimension definitions:**\n\n- **Financial Stability:** Liquidity, profitability trend, credit health, restructuring signals\n- **Operational Resilience:** Single-site dependency, qua"},{"path":"README.md","content":"# supplier-risk-scorecard\n\nAssess a supplier's risk profile across five standardized dimensions and produce a scored risk scorecard with a risk-tier rating and a prioritized mitigation action plan.\n\n## When to use\n\nUse this skill when:\n- Onboarding a new supplier and need a structured risk baseline\n- Conducting an annual or triggered supplier review\n- A disruption signal (news, audit finding, geopolitical event) warrants a rapid re-assessment\n- Procurement or sourcing leadership needs a risk-tiered supplier ranking\n\n## What it delivers\n\n- A completed risk scorecard table (five dimensions, each scored 1–5)\n- An overall risk tier: Low / Medium / High / Critical\n- The top three risk flags with supporting evidence\n- A prioritized mitigation action plan (owner, action, timeline)\n- An evidence-gap log noting which scores rely on assumptions\n\n## Inputs expected\n\n| Input | Required? |\n|---|---|\n| Supplier name and legal entity | Yes |\n| Country of incorporation / primary operations | Yes |\n| Category or commodity supplied | Recommended |\n| Tier level (Tier 1 / Tier 2) | Recommended |\n| Estimated annual spend | Optional |\n| Supporting documents (financials, audit reports, certifications, delivery data) | Optional — skill works without them |\n\n## Safety notes\n\n- Never fabricates financial data, audit results, or country risk scores.\n- Scores missing dimensions conservatively and flags every assumption explicitly.\n- Does not request system credentials, login access, or internal database exports.\n- Personal employee data in shared documents is not quoted or retained in output.\n- Sanctioned entities or confirmed regulatory violations are always escalated to Critical tier.\n\n## Feedback & Contributions\n\nFound a gap or have a suggestion? [Open an issue or PR](https://github.com/archlab-space/Open-Skill-Hub/issues) — improvements are welcome."},{"path":"_meta.json","content":"{\n \"ownerId\": \"kn798vfcxrgjdt230v34k8eqf584vpwv\",\n \"slug\": \"supplier-risk-scorecard\",\n \"version\": \"0.1.2\",\n \"publishedAt\": 1779961894956\n}"},{"path":"CHANGELOG.md","content":"# Changelog\n\n## [0.1.2] - 2026-05-28\nRewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity.\n\n## [0.1.1] - 2026-05-21\n\n### Added\n- Feedback prompt in README.md and conditional feedback section in SKILL.md\n\n## [0.1.0] - 2026-05-19\nInitial release. Adds structured five-dimension supplier risk scoring workflow with risk-tier calculation, mitigation action plan, and evidence-gap logging."},{"path":"skill-card.md","content":"## Description:\n\nUse this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile, producing a scored five-dimension risk scorecard, a Low/Medium/High/Critical tier rating, and a prioritized mitigation action plan for procurement review.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[archlab-space](https://clawhub.ai/user/archlab-space)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nSupply chain analysts, procurement managers, and sourcing teams use this skill to assess supplier risk during onboarding, periodic review, triggered reassessment, or risk-tiered supplier ranking. It guides intake, evidence collection, five-dimension scoring, risk-tier calculation, mitigation planning, and evidence-gap logging.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: Supplier financials, audits, sanctions checks, and employee-related materials can contain confidential or regulated information.\n\nMitigation: Use only authorized, business-relevant excerpts and redact unnecessary personal data, secrets, credentials, and regulated information before using the skill.\n\nRisk: Missing supplier evidence can make risk scores assumption-based and less reliable.\n\nMitigation: Flag every assumption explicitly, log evidence gaps, and do not present assumed scores as evidence-backed conclusions.\n\nRisk: A sanctioned supplier or confirmed material regulatory violation may require immediate business escalation.\n\nMitigation: Escalate the overall tier to Critical and recommend review by legal and procurement leadership before further action.\n\n## Reference(s):\n\n- [ClawHub skill page](https://clawhub.ai/archlab-space/skills/supplier-risk-scorecard)\n\n## Skill Output:\n\n**Output Type(s):** [Text, Markdown, Analysis, Guidance]\n\n**Output Format:** [Markdown scorecard with tables, ranked risk flags, recommended actions, and evidence gaps]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [Uses five weighted supplier-risk dimensions, maps scores to Low/Medium/High/Critical tiers, and escalates Critical or High conditions under stated rules.]\n\n## Skill Version(s):\n\n0.1.2 (source: server release evidence and changelog, released 2026-05-28)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment."}],"languages":[],"docsSourceLabel":"CLAWHUB","editorialOverview":"Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension... Skill: Supplier Risk Scorecard Owner: archlab-space Summary: Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension... Tags: latest:0.1.2 Version history: v0.1.2 | 2026-05-28T09:51:34.956Z | user Rewrote frontmatter description to concise 200–500 character format for improved agent-trigger clarity. v0.1.0 | 2026-05-","editorialQuality":{"score":100,"threshold":65,"status":"ready","wordCount":1410,"uniquenessScore":49,"reasons":[]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-10-12T00:51:36.300Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-10-12T00:51:36.300Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-12T21:06:44.184Z","emptyReason":null},"items":[{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-10-09T19:11:12.944Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}