Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Tencent SkillHub Β· Finance & Trading
Vendor Risk Assessment
Evaluate and score vendors on security, financials, compliance, operations, and data handling to classify risk and manage remediation plans effectively.
skill openclawclawhub Free
Evaluate and score vendors on security, financials, compliance, operations, and data handling to classify risk and manage remediation plans effectively.
β¬ 0 downloads β
0 stars Unverified but indexed
Install for OpenClaw
Quick setup
- Download the package from Yavira.
- Extract the archive and review SKILL.md first.
- Import or place the package into your OpenClaw setup.
Package facts
- Download mode
- Yavira redirect
- Package format
- ZIP package
- Source platform
- Tencent SkillHub
- What's included
- README.md, SKILL.md
Validation
- Use the Yavira download entry.
- Review SKILL.md after the package is downloaded.
- Confirm the extracted package contains the expected setup assets.
Install with your agent
Agent handoff
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
New install
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Then review README.md for any prerequisites, environment setup, or post-install checks. Tell me what you changed and call out any manual steps you could not complete.
Upgrade existing
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Then review README.md for any prerequisites, environment setup, or post-install checks. Summarize what changed and any follow-up checks I should run.
Trust & source
Release facts
- Source
- Tencent SkillHub
- Verification
- Indexed source record
- Version
- 1.0.0
Provenance
- Publisher
- 1kalin
- Source page
- View original listing
- Canonical URL
- Open canonical page
Documentation
Vendor Risk Assessment
Score and manage third-party vendor risk across security, financial stability, compliance, operational dependency, and data handling. Built for procurement teams, CISOs, and operations leaders managing 10+ vendors.
Usage
Run this assessment for each critical vendor. Aggregate scores into a portfolio risk view.
1. Vendor Risk Scorecard (5 Domains, 0-100 each)
Security Posture (0-100) SOC 2 Type II current? (+20) Penetration test within 12 months? (+15) Incident response plan documented? (+15) Data encryption at rest and transit? (+15) MFA enforced for all access? (+10) Security questionnaire completed? (+10) Subprocessor list disclosed? (+15) Financial Stability (0-100) Revenue trend (growing +25, flat +10, declining 0) Funding runway >18 months? (+20) Customer concentration <20%? (+15) Public financials or audited statements? (+15) No material litigation? (+15) Credit rating acceptable? (+10) Compliance & Regulatory (0-100) Industry certifications current? (+20) GDPR/CCPA compliant? (+20) Data processing agreement signed? (+15) Regulatory audit history clean? (+15) Right to audit clause? (+15) Data residency requirements met? (+15) Operational Dependency (0-100) SLA with financial penalties? (+20) Uptime >99.9% trailing 12 months? (+20) Disaster recovery tested annually? (+15) Single point of failure for your business? (-20) Migration plan documented? (+15) API/export capability? (+15) Vendor lock-in risk assessment? (+15) Data Handling (0-100) Data classification documented? (+20) Retention/deletion policies clear? (+20) Breach notification <72 hours? (+20) Data portability guaranteed? (+15) AI/ML training on your data? (opt-out available +15, no opt-out -10) Access logging and audit trail? (+10)
2. Risk Tier Classification
Aggregate ScoreTierReview CadenceAction400-500Low RiskAnnualStandard monitoring300-399ModerateSemi-annualRemediation plan required200-299High RiskQuarterlyExecutive escalation, alternatives identified0-199CriticalMonthlyExit plan required within 90 days
3. Portfolio Risk View
Total vendors: ___ Critical tier: ___ (target: 0) High risk: ___ (target: <10%) Moderate: ___ (target: <30%) Low risk: ___ (target: >60%) Top 3 concentration risks: 1. [Vendor] β [function] β [% of operations dependent] 2. [Vendor] β [function] β [% of operations dependent] 3. [Vendor] β [function] β [% of operations dependent] Annual vendor spend: $___ Spend on high/critical vendors: $___ (___%)
4. Cost of Vendor Failure
Impact AreaCalculationRevenue lossDaily revenue Γ expected downtime daysRecovery costMigration estimate + emergency procurementCompliance penaltyRegulatory fine range for data breach via vendorReputation damageCustomer churn rate Γ LTV Γ affected customersOperational disruptionStaff idle cost Γ recovery period
5. Quarterly Review Template
Score changes since last review (flag any >10 point drops) New subprocessors added by vendor SLA performance vs target Security incidents or near-misses Contract renewal timeline and negotiation leverage Alternative vendor benchmarking
6. Red Flags (Immediate Action)
Vendor acquired by competitor Key personnel departures (CISO, CTO) Downtime exceeding SLA 2+ months Regulatory action or investigation Refusal to complete security questionnaire Data breach affecting other customers Sudden pricing changes >20%
Industry-Specific Vendor Risks
IndustryCritical Vendor CategorySpecific RiskHealthcareEHR, billing, telehealthHIPAA BAA gaps, PHI exposureFinancial ServicesCore banking, payments, KYCPCI DSS, regulatory reportingLegalCase management, ediscoveryPrivilege breach, client dataSaaSInfrastructure, auth, paymentsCascading outages, PIIManufacturingMES, supply chain, IoTIP theft, production stoppageConstructionProject management, safetyCompliance documentation gapsEcommercePayments, fulfillment, CDNPCI, availability during peakRecruitmentATS, background check, payrollCandidate PII, bias in AI screeningReal EstateMLS, transaction mgmt, titleWire fraud, closing delaysProfessional ServicesCRM, billing, document mgmtClient confidentiality breach
Get the Full Playbook
AI Revenue Leak Calculator β Quantify your total automation opportunity Industry Context Packs β $47 each, deep-dive playbooks Agent Setup Wizard β Build your AI agent workforce
Category context
Trading, swaps, payments, treasury, liquidity, and crypto-financial operations.
Source: Tencent SkillHub
Largest current source with strong distribution and engagement signals.
Package contents
Included in package
2 Docs
- SKILL.md
- README.md