feat: pharmaceutical-goods-distribution-manager skill package v0.1.0

2026-08-14 16:30:53 +02:00
commit 812f41ea5e
8 changed files with 802 additions and 0 deletions
--- a/PROVENANCE.md
+++ b/PROVENANCE.md
@@ -0,0 +1,30 @@
+# Data provenance — pharmaceutical-goods-distribution-manager
+
+Where the content of this skill package comes from, counted by
+content items (tasks, competences, tools, evidence entries, curated
+knowledge). Rendered live by Gitea:
+
+```mermaid
+%%{init: {'theme':'base','themeVariables':{'pie1':'#f9a825','pie2':'#1e88e5','pie3':'#d97757','pie4':'#8e24aa','pieOuterStrokeWidth':'0px','pieSectionTextColor':'#fff'}}}%%
+pie showData
+    title Content sources — pharmaceutical-goods-distribution-manager
+    "ESCO (occupation & competences)" : 27
+    "O*NET (tasks & tools)" : 113
+    "Anthropic official Claude skills" : 5
+    "External AI skill packs (mapped)" : 153
+```
+
+| Source | Items | Share | Files |
+|---|---|---|---|
+| ESCO (occupation & competences) | 27 | 9.1 % | references/profile.md, references/skills.md |
+| O*NET (tasks & tools) | 113 | 37.9 % | references/tasks.md, references/tools.md |
+| Job boards (market evidence) | 0 | 0.0 % | references/market.md (full report) + "Market evidence" headline sections |
+| Wikipedia & AI expert curation | 0 | 0.0 % | glossary, literature, usecases, intake, quality, evals/ |
+| Anthropic official Claude skills | 5 | 1.7 % | references/ai-skills.md, section "anthropics/skills" (official Claude Code skills) |
+| External AI skill packs (mapped) | 153 | 51.3 % | references/ai-skills.md (per-source attribution inside) |
+| Stack Exchange practitioner Q&A (CC-BY-SA) | 0 | 0.0 % | references/practitioner-qa.md (per-entry attribution inside) |
+
+Licensing: O*NET (USDOL/ETA, CC BY 4.0) · ESCO (© European Union) ·
+job-ad evidence via official APIs (JSearch/Adzuna) · Wikipedia content
+paraphrased with source URLs — never copied · external AI skills are
+linked, not copied (Apache-2.0/MIT/source-available, see ai-skills.md).
--- a/SKILL.md
+++ b/SKILL.md
@@ -0,0 +1,53 @@
+---
+name: pharmaceutical-goods-distribution-manager
+description: "Occupational skill for the role 'pharmaceutical goods distribution manager' (also: pharmaceutical goods supply chain planner, pharmaceutical goods logistics manager, assistant pharmaceutical goods distribution manager, pharmaceutical goods logistics planner, senior pharmaceutical goods distribution manager, pharmaceutical goods supply chain manager). Use when the user asks for typical pharmaceutical goods distribution manager work such as: typical pharmaceutical goods distribution manager responsibilities"
+---
+
+# Pharmaceutical Goods Distribution Manager
+
+Pharmaceutical goods distribution managers plan the distribution of pharmaceutical gooods to various points of sales.
+
+## Core workflow
+
+
+## How to use this skill
+
+- Read [references/profile.md](references/profile.md) for the occupation profile and scope.
+- Consult [references/tasks.md](references/tasks.md) for the full task and activity inventory.
+- Check [references/skills.md](references/skills.md) for essential vs. optional competences.
+- Check [references/tools.md](references/tools.md) for the software commonly used in this role.
+- See [references/ai-skills.md](references/ai-skills.md) — matched external AI agent skills (per-source attribution).
+
+## Key competences (essential)
+
+- adhere to organisational guidelines
+- analyse supply chain trends
+- carry out inventory control accuracy
+- carry out statistical forecasts
+- communicate with shipment forwarders
+- create solutions to problems
+- develop financial statistics reports
+- ensure customs compliance
+- ensure regulatory compliance concerning distribution activities
+- freight transport methods
+- handle carriers
+- have computer literacy
+- hazardous freight regulations
+- implement strategic planning
+- manage financial risk
+
+## Hot technologies
+
+- MEDITECH software
+- Microsoft Access
+- Microsoft Excel
+- Microsoft Office software
+- Microsoft Outlook
+- Microsoft PowerPoint
+- Microsoft Project
+- Microsoft SharePoint
+- Microsoft SQL Server
+- Microsoft Visio
+
+---
+*Sources: ESCO v1.2.1 (http://data.europa.eu/esco/occupation/24af7ff6-bd84-43a6-8cba-e60776f956f5), O*NET 30.3 (11-3071.04, manual nearest match). See manifest.json for licensing/attribution.*
--- a/manifest.json
+++ b/manifest.json
@@ -0,0 +1,226 @@
+{
+  "name": "pharmaceutical-goods-distribution-manager",
+  "title": "pharmaceutical goods distribution manager",
+  "version": "0.1.0",
+  "layer": "core",
+  "language": "en",
+  "generated": "2026-07-07",
+  "ids": {
+    "esco_uri": "http://data.europa.eu/esco/occupation/24af7ff6-bd84-43a6-8cba-e60776f956f5",
+    "esco_code": "1324.3.1.6.25",
+    "isco_group": "1324",
+    "onet_soc": "11-3071.04",
+    "crosswalk_match": "manual nearest via ISCO 1324 (Supply Chain Managers)"
+  },
+  "sources": [
+    {
+      "name": "ESCO",
+      "version": "1.2.1",
+      "url": "https://esco.ec.europa.eu/"
+    },
+    {
+      "name": "O*NET",
+      "version": "30.3",
+      "url": "https://www.onetcenter.org/",
+      "license": "CC BY 4.0"
+    }
+  ],
+  "attribution": "This package includes information from the O*NET Database (v30.3) by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA), CC BY 4.0. skillfactor is not endorsed by USDOL/ETA. ESCO data (v1.2.1) (c) European Union, used per the ESCO download conditions: https://esco.ec.europa.eu/en/use-esco/download",
+  "counts": {
+    "tasks": 0,
+    "dwas": 0,
+    "skills_essential": 26,
+    "skills_optional": 0,
+    "software": 0
+  },
+  "enrichment_ai_skills": {
+    "generated": "2026-07-14",
+    "method": "deterministic mapping (ISCO prefix + title/competence keywords)",
+    "sources": {
+      "anthropics/skills": {
+        "repo": "https://github.com/anthropics/skills",
+        "commit": "f6656c1",
+        "license": "Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available \u2014 see the LICENSE.txt in the upstream skill folder",
+        "skills": 2
+      },
+      "wshobson/agents": {
+        "repo": "https://github.com/wshobson/agents",
+        "commit": "6fd3247",
+        "license": "MIT (c) Seth Hobson",
+        "skills": 1
+      },
+      "jeremylongshore/claude-code-plugins-plus-skills": {
+        "repo": "https://github.com/jeremylongshore/claude-code-plugins-plus-skills",
+        "commit": "e112938a",
+        "license": "MIT",
+        "skills": 12
+      },
+      "nexscope-ai/eCommerce-Skills": {
+        "repo": "https://github.com/nexscope-ai/eCommerce-Skills",
+        "commit": "56f3288",
+        "license": "MIT",
+        "skills": 5
+      },
+      "davila7/claude-code-templates": {
+        "repo": "https://github.com/davila7/claude-code-templates",
+        "commit": "fa79251",
+        "license": "MIT",
+        "skills": 7
+      },
+      "mukul975/Anthropic-Cybersecurity-Skills": {
+        "repo": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills",
+        "commit": "673da1f",
+        "license": "Apache-2.0",
+        "skills": 10
+      },
+      "a5c-ai/babysitter": {
+        "repo": "https://github.com/a5c-ai/babysitter",
+        "commit": "44a5d58b",
+        "license": "MIT",
+        "skills": 12
+      },
+      "alirezarezvani/claude-skills": {
+        "repo": "https://github.com/alirezarezvani/claude-skills",
+        "commit": "0241f43",
+        "license": "MIT",
+        "skills": 5
+      },
+      "trailofbits/skills": {
+        "repo": "https://github.com/trailofbits/skills",
+        "commit": "cfe5d7b",
+        "license": "custom (see upstream LICENSE)",
+        "skills": 1
+      },
+      "avelikiy/great_cto": {
+        "repo": "https://github.com/avelikiy/great_cto",
+        "commit": "4fe1e39",
+        "license": "MIT",
+        "skills": 1
+      },
+      "mohitagw15856/pm-claude-skills": {
+        "repo": "https://github.com/mohitagw15856/pm-claude-skills",
+        "commit": "876fa30",
+        "license": "MIT",
+        "skills": 4
+      },
+      "open-gitagent/opengap": {
+        "repo": "https://github.com/open-gitagent/opengap",
+        "commit": "d7a8e2e",
+        "license": "MIT",
+        "skills": 1
+      },
+      "hypnguyen1209/offensive-claude": {
+        "repo": "https://github.com/hypnguyen1209/offensive-claude",
+        "commit": "4d62be7",
+        "license": "MIT",
+        "skills": 2
+      },
+      "Sushegaad/Claude-Skills-Governance-Risk-and-Compliance": {
+        "repo": "https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance",
+        "commit": "71d8920",
+        "license": "MIT",
+        "skills": 1
+      },
+      "dotnet/skills": {
+        "repo": "https://github.com/dotnet/skills",
+        "commit": "79a2ada",
+        "license": "MIT",
+        "skills": 1
+      },
+      "affaan-m/everything-claude-code": {
+        "repo": "https://github.com/affaan-m/everything-claude-code",
+        "commit": "ed38744",
+        "license": "MIT",
+        "skills": 2
+      },
+      "rampstackco/claude-skills": {
+        "repo": "https://github.com/rampstackco/claude-skills",
+        "commit": "bc6d961",
+        "license": "MIT",
+        "skills": 1
+      },
+      "secondsky/claude-skills": {
+        "repo": "https://github.com/secondsky/claude-skills",
+        "commit": "c4889f6",
+        "license": "MIT",
+        "skills": 1
+      },
+      "brycewang-stanford/Auto-Empirical-Research-Skills": {
+        "repo": "https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills",
+        "commit": "85bf545",
+        "license": "CC-BY-4.0",
+        "skills": 2
+      },
+      "backnotprop/plannotator": {
+        "repo": "https://github.com/backnotprop/plannotator",
+        "commit": "29513e1",
+        "license": "Apache-2.0",
+        "skills": 2
+      },
+      "googleworkspace/cli": {
+        "repo": "https://github.com/googleworkspace/cli",
+        "commit": "a3768d0",
+        "license": "Apache-2.0",
+        "skills": 1
+      },
+      "ognjengt/founder-skills": {
+        "repo": "https://github.com/ognjengt/founder-skills",
+        "commit": "a45931c",
+        "license": "MIT",
+        "skills": 1
+      },
+      "davepoon/buildwithclaude": {
+        "repo": "https://github.com/davepoon/buildwithclaude",
+        "commit": "3c94e0c",
+        "license": "MIT",
+        "skills": 2
+      },
+      "microsoft/power-platform-skills": {
+        "repo": "https://github.com/microsoft/power-platform-skills",
+        "commit": "0d7ed9a",
+        "license": "MIT",
+        "skills": 1
+      },
+      "basicmachines-co/basic-memory": {
+        "repo": "https://github.com/basicmachines-co/basic-memory",
+        "commit": "53da71c",
+        "license": "custom (see upstream LICENSE)",
+        "skills": 1
+      },
+      "jezweb/claude-skills": {
+        "repo": "https://github.com/jezweb/claude-skills",
+        "commit": "e875a6b",
+        "license": "MIT",
+        "skills": 1
+      }
+    },
+    "total_skills": 80,
+    "tiers": {
+      "core": 64,
+      "adjacent": 16
+    }
+  },
+  "provenance": {
+    "items": {
+      "esco": 27,
+      "onet": 113,
+      "jobads": 0,
+      "wiki_ai": 0,
+      "anthropic": 5,
+      "ai_skills": 153,
+      "stackx": 0
+    },
+    "share_percent": {
+      "esco": 9.1,
+      "onet": 37.9,
+      "jobads": 0.0,
+      "wiki_ai": 0.0,
+      "anthropic": 1.7,
+      "ai_skills": 51.3,
+      "stackx": 0.0
+    },
+    "method": "content items per source category"
+  },
+  "collar": "white",
+  "computer_work": true
+}
--- a/references/ai-skills.md
+++ b/references/ai-skills.md
@@ -0,0 +1,306 @@
+# External AI agent skills — pharmaceutical-goods-distribution-manager
+
+Proven, publicly available AI agent skills mapped to this occupation.
+Nothing is copied from the sources: every entry is a name, a one-line
+summary and a link to the upstream skill package. Each section names
+its source repository, commit, license and retrieval date.
+
+**Tiers:** `core` = the skill directly exercises a top market hard
+skill, tool or method (from gated job-ad evidence) or an essential
+ESCO competence of this occupation; `adjacent` =
+plausibly useful, secondary. Entries are capped at 12 per source
+and 80 in total per occupation (core first,
+strongest matches survive); everything beyond the caps is excluded
+and logged in the pipeline audit trail, not in this package.
+
+_Matched deterministically (ISCO group + title/competence keywords,
+tiered against market evidence + ESCO essentials) by
+`pipeline/p5_enrich_ai_skills.py` on 2026-07-14._
+
+## Source: anthropics/skills
+
+- Repository: [https://github.com/anthropics/skills](https://github.com/anthropics/skills) (commit `f6656c1`, retrieved 2026-07-14)
+- License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `docx` | adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | [source](https://github.com/anthropics/skills/tree/main/skills/docx) |
+| `pdf` | adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | [source](https://github.com/anthropics/skills/tree/main/skills/pdf) |
+
+## Source: wshobson/agents
+
+- Repository: [https://github.com/wshobson/agents](https://github.com/wshobson/agents) (commit `6fd3247`, retrieved 2026-07-14)
+- License: MIT (c) Seth Hobson
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `team-collaboration-dx-optimizer (agent)` | adjacent | Developer Experience specialist. Improves tooling, setup, and workflows. Use PROACTIVELY when setting up new projects, after team feedback, or when development friction is noticed. | [source](https://github.com/wshobson/agents/tree/main/plugins/team-collaboration/agents/dx-optimizer.md) |
+
+## Source: a5c-ai/babysitter
+
+- Repository: [https://github.com/a5c-ai/babysitter](https://github.com/a5c-ai/babysitter) (commit `44a5d58b`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `early-warning-monitor` | core | Continuous supplier and supply chain risk monitoring with automated alerts | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/early-warning-monitor) |
+| `supply-chain-risk-assessor` | core | Comprehensive supply chain risk identification and assessment skill with heat mapping | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/supply-chain-risk-assessor) |
+| `cost-to-serve-analyzer` | core | Supply chain cost-to-serve analysis skill by customer, product, or channel | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/cost-to-serve-analyzer) |
+| `incoterms-compliance-checker` | core | International shipping terms validation and documentation skill ensuring trade compliance | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/logistics/skills/incoterms-compliance-checker) |
+| `iso14971-risk-analyzer` | core | Comprehensive risk management skill implementing ISO 14971:2019 methodology for medical device risk analysis | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/science/biomedical-engineering/skills/iso14971-risk-analyzer) |
+| `supply-chain-visibility-platform` | core | End-to-end supply chain visibility skill providing real-time tracking and control tower capabilities | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/logistics/skills/supply-chain-visibility-platform) |
+| `contingency-plan-builder` | core | Business continuity and contingency plan development skill for supply chain resilience | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/contingency-plan-builder) |
+| `population-health-stratification` | core | Stratify patient populations by risk level using claims data, clinical data, and social determinants to prioritize care management interventions | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/social-sciences-humanities/healthcare/skills/population-health-stratification) |
+| `supply-chain-digital-twin` | core | Digital twin representation of supply chain for real-time monitoring and simulation | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/supply-chain-digital-twin) |
+| `design-fmea-generator` | core | Design Failure Mode and Effects Analysis (DFMEA) skill for systematic design risk identification | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/science/biomedical-engineering/skills/design-fmea-generator) |
+| `disruption-response-coordinator` | core | Supply chain disruption rapid response skill with impact assessment and mitigation activation | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/disruption-response-coordinator) |
+| `freight-audit-validator` | core | Automated freight bill validation skill with discrepancy detection and payment processing automation | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/logistics/skills/freight-audit-validator) |
+
+## Source: affaan-m/everything-claude-code
+
+- Repository: [https://github.com/affaan-m/everything-claude-code](https://github.com/affaan-m/everything-claude-code) (commit `ed38744`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `customs-trade-compliance` | core | 通関書類、関税分類、関税最適化、制限当事者スクリーニング、複数の法域にわたる規制コンプライアンスのための成文化された専門知識。15年以上の経験を持つ貿易コンプライアンス専門家に情報。HS分類ロジック、インコターム適用、FTA利用、ペナルティ軽減を含みます。通関許可、関税分類、貿易コンプライアンス、輸入/輸出ドキュメント、または関税最適化を処理するときに使用します。 | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/docs/ja-JP/skills/customs-trade-compliance) |
+| `carrier-relationship-management` | adjacent | Codified expertise for managing carrier portfolios, negotiating freight rates, tracking carrier performance, allocating freight, and maintaining strategic carrier relationships. Informed by transportation managers with 15+ years … | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/skills/carrier-relationship-management) |
+
+## Source: alirezarezvani/claude-skills
+
+- Repository: [https://github.com/alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills) (commit `0241f43`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `risk-management-specialist` | core | Medical device risk management specialist implementing ISO 14971 throughout product lifecycle. Provides risk analysis, risk evaluation, risk control, and post-production information analysis. Use when user mentions risk management, ISO … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/ra-qm-team/skills/risk-management-specialist) |
+| `ceo-advisor` | core | Executive leadership guidance for strategic decision-making, organizational development, and stakeholder management. Use when planning strategy, preparing board presentations, managing investors, developing organizational culture, making … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/skills/ceo-advisor) |
+| `fda-consultant-specialist` | core | FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QMSR (21 CFR 820, which incorporates ISO 13485:2016 by reference since 2026-02-02; formerly QSR) compliance, HIPAA assessments, and … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/ra-qm-team/skills/fda-consultant-specialist) |
+| `quality-documentation-manager` | adjacent | Document control system management for medical device QMS. Covers document numbering, version control, change management, and 21 CFR Part 11 compliance. Use when working on document control procedures, change control workflows, document … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/ra-qm-team/skills/quality-documentation-manager) |
+| `social-media-manager` | adjacent | When the user wants to develop social media strategy, plan content calendars, manage community engagement, or grow their social presence across platforms. Also use when the user mentions 'social media strategy,' 'social calendar,' … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/marketing-skill/skills/social-media-manager) |
+
+## Source: avelikiy/great_cto
+
+- Repository: [https://github.com/avelikiy/great_cto](https://github.com/avelikiy/great_cto) (commit `4fe1e39`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `vertical-logistics` | core | Domain knowledge for the logistics & supply-chain vertical (SMB shipping & inventory) so architect and pm don't spec naively. Covers the vocabulary (TMS vs WMS, multi-carrier rate shopping, dimensional weight, BOL/ASN, lot/batch, reorder … | [source](https://github.com/avelikiy/great_cto/tree/4fe1e39/skills/vertical-logistics) |
+
+## Source: backnotprop/plannotator
+
+- Repository: [https://github.com/backnotprop/plannotator](https://github.com/backnotprop/plannotator) (commit `29513e1`, retrieved 2026-07-14)
+- License: Apache-2.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `review-renovate` | core | Review Renovate bot PRs that update GitHub Actions dependencies. Verifies supply chain integrity by checking pinned commit SHAs against upstream tagged releases, reviews changelogs for breaking changes, and confirms compatibility with … | [source](https://github.com/backnotprop/plannotator/tree/29513e1/.agents/skills/review-renovate) |
+| `update-deps` | core | Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping. Defers risky packages to ~/.supply-chain/notes/. | [source](https://github.com/backnotprop/plannotator/tree/29513e1/.agents/skills/update-deps) |
+
+## Source: basicmachines-co/basic-memory
+
+- Repository: [https://github.com/basicmachines-co/basic-memory](https://github.com/basicmachines-co/basic-memory) (commit `53da71c`, retrieved 2026-07-14)
+- License: custom (see upstream LICENSE)
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `memory-tasks` | adjacent | Task management via Basic Memory schemas: create, track, and resume structured tasks that survive context compaction. Uses BM's schema system for uniform notes queryable through the knowledge graph. | [source](https://github.com/basicmachines-co/basic-memory/tree/53da71c/skills/memory-tasks) |
+
+## Source: brycewang-stanford/Auto-Empirical-Research-Skills
+
+- Repository: [https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills) (commit `85bf545`, retrieved 2026-07-14)
+- License: CC-BY-4.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `enrichr-api` | core | Perform gene set enrichment analysis using the Enrichr API | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/43-wentorai-research-plugins/skills/domains/biomedical/enrichr-api) |
+| `hud` | adjacent | Diverga HUD (Heads-Up Display) management skill. Configure and manage the research project statusline display. Supports multiple presets: research, checkpoint, memory, minimal. Triggers: "hud", "statusline", "display settings | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/25-HosungYou-Diverga/skills/hud) |
+
+## Source: davepoon/buildwithclaude
+
+- Repository: [https://github.com/davepoon/buildwithclaude](https://github.com/davepoon/buildwithclaude) (commit `3c94e0c`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `google-calendar-automation` | adjacent | Automate Google Calendar events, scheduling, availability checks, and attendee management via Rube MCP (Composio). Create events, find free slots, manage attendees, and list calendars programmatically. | [source](https://github.com/davepoon/buildwithclaude/tree/3c94e0c/plugins/all-skills/skills/google-calendar-automation) |
+| `outlook-calendar-automation` | adjacent | Automate Outlook Calendar tasks via Rube MCP (Composio): create events, manage attendees, find meeting times, and handle invitations. Always search tools first for current schemas. | [source](https://github.com/davepoon/buildwithclaude/tree/3c94e0c/plugins/all-skills/skills/outlook-calendar-automation) |
+
+## Source: davila7/claude-code-templates
+
+- Repository: [https://github.com/davila7/claude-code-templates](https://github.com/davila7/claude-code-templates) (commit `fa79251`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `vulnerability-scanner` | core | Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/security/vulnerability-scanner) |
+| `risk-management-specialist` | core | Senior Risk Management specialist for medical device companies implementing ISO 14971 risk management throughout product lifecycle. Provides risk analysis, risk evaluation, risk control, and post-production information analysis. Use for … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/enterprise-communication/risk-management-specialist) |
+| `Excel Analysis` | core | Analyze Excel spreadsheets, create pivot tables, generate charts, and perform data analysis. Use when analyzing Excel files, spreadsheets, tabular data, or .xlsx files. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/enterprise-communication/excel-analysis) |
+| `fda-consultant-specialist` | core | Senior FDA consultant and specialist for medical device companies including HIPAA compliance and requirement management. Provides FDA pathway expertise, QSR compliance, cybersecurity guidance, and regulatory submission support. Use for FDA … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/enterprise-communication/fda-consultant-specialist) |
+| `supply-chain-guard` | core | Detect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/security/supply-chain-guard) |
+| `mdr-745-specialist` | adjacent | EU MDR 2017/745 regulation specialist and consultant for medical device requirement management. Provides comprehensive MDR compliance expertise, gap analysis, technical documentation guidance, clinical evidence requirements, and … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/enterprise-communication/mdr-745-specialist) |
+| `quality-manager-qms-iso13485` | adjacent | ISO 13485 Quality Management System specialist for medical device companies. Provides QMS implementation, maintenance, process optimization, and compliance expertise. Use for QMS design, documentation control, management review, internal … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/enterprise-communication/quality-manager-qms-iso13485) |
+
+## Source: dotnet/skills
+
+- Repository: [https://github.com/dotnet/skills](https://github.com/dotnet/skills) (commit `79a2ada`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `coverage-analysis` | core | Project-wide code coverage and CRAP (Change Risk Anti-Patterns) score analysis for .NET projects. Calculates CRAP scores per method and surfaces risk hotspots — complex code with low coverage that is dangerous to modify. Use to diagnose … | [source](https://github.com/dotnet/skills/tree/79a2ada/plugins/dotnet-test/skills/coverage-analysis) |
+
+## Source: googleworkspace/cli
+
+- Repository: [https://github.com/googleworkspace/cli](https://github.com/googleworkspace/cli) (commit `a3768d0`, retrieved 2026-07-14)
+- License: Apache-2.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `recipe-find-free-time` | core | Query Google Calendar free/busy status for multiple users to find a meeting slot. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/recipe-find-free-time) |
+
+## Source: hypnguyen1209/offensive-claude
+
+- Repository: [https://github.com/hypnguyen1209/offensive-claude](https://github.com/hypnguyen1209/offensive-claude) (commit `4d62be7`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `vulnerability-analysis` | core | Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks | [source](https://github.com/hypnguyen1209/offensive-claude/tree/4d62be7/skills/vulnerability-analysis) |
+| `cicd-supply-chain` | core | Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance | [source](https://github.com/hypnguyen1209/offensive-claude/tree/4d62be7/skills/cicd-supply-chain) |
+
+## Source: jeremylongshore/claude-code-plugins-plus-skills
+
+- Repository: [https://github.com/jeremylongshore/claude-code-plugins-plus-skills](https://github.com/jeremylongshore/claude-code-plugins-plus-skills) (commit `e112938a`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `flexport-data-handling` | core | Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-data-handling) |
+| `volt-recon` | core | Firmware reconnaissance for takeover — inventory the MCU, peripherals, RTOS, protocols, OTA, power management, and assess code quality with risk flags. Use when asked to "understand this firmware", "device inventory", or "embedded … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/ai-agency/tonone/skills/volt-recon) |
+| `flexport-deploy-integration` | core | Deploy Flexport logistics integrations to Vercel, Fly.io, and Cloud Run. Use when deploying shipment tracking dashboards, webhook receivers, or supply chain automation services to production infrastructure. Trigger: "deploy flexport", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-deploy-integration) |
+| `flexport-prod-checklist` | core | Execute Flexport production deployment checklist for logistics integrations. Use when deploying shipment tracking, booking automation, or supply chain integrations to production with proper monitoring and rollback. Trigger: "flexport … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-prod-checklist) |
+| `flexport-reference-architecture` | core | Implement Flexport reference architecture for supply chain integrations with best-practice project layout, service boundaries, and data flow. Trigger: "flexport architecture", "flexport project structure", "flexport system design".  | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-reference-architecture) |
+| `flexport-hello-world` | core | Create a minimal working Flexport example \u2014 list shipments and\ \ track containers.\nUse when starting a new Flexport integration, testing your\ \ setup,\nor learning the Flexport REST API v2 patterns.\nTrigger: \"flexport hello\ \ … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-hello-world) |
+| `flexport-incident-runbook` | core | Execute Flexport incident response for API outages, webhook failures, and supply chain data sync issues with triage and mitigation steps. Trigger: "flexport incident", "flexport outage", "flexport down", "flexport emergency".  | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-incident-runbook) |
+| `warden` | core | Security engineer — IAM, secrets, threat modeling, hardening, auth, and supply chain security. | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/ai-agency/tonone/skills/warden) |
+| `abridge-reference-architecture` | core | Implement Abridge reference architecture for clinical AI integration. Use when designing a new Abridge deployment, reviewing project structure, or planning multi-site health system rollouts with EHR integration. Trigger: "abridge … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/abridge-pack/skills/abridge-reference-architecture) |
+| `crest-narrative` | core | Strategic narrative — write a standalone strategy memo that frames product direction, bets, and rationale for a planning horizon. Use when asked to "write a strategy doc", "product vision", "strategic narrative", "company strategy memo", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/ai-agency/tonone/skills/crest-narrative) |
+| `openrouter-debug-bundle` | core | Create debug bundles for troubleshooting OpenRouter API issues. Use when diagnosing failures, unexpected responses, or latency problems. Triggers: ''openrouter debug'', ''openrouter troubleshoot'', ''debug openrouter request'', … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/openrouter-pack/skills/openrouter-debug-bundle) |
+| `snowflake-load-scale` | core | Implement Snowflake load testing, warehouse scaling, and capacity planning. Use when testing query performance at scale, configuring multi-cluster warehouses, or planning capacity for production Snowflake workloads. Trigger with phrases … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/snowflake-pack/skills/snowflake-load-scale) |
+
+## Source: jezweb/claude-skills
+
+- Repository: [https://github.com/jezweb/claude-skills](https://github.com/jezweb/claude-skills) (commit `e875a6b`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `shopify-products` | adjacent | Create and manage Shopify products via the Admin GraphQL API or CSV import. Workflow: gather data, choose method, execute, verify. Use whenever the user wants to add products to Shopify, bulk-import a catalog from CSV/spreadsheet/URL, … | [source](https://github.com/jezweb/claude-skills/tree/e875a6b/plugins/shopify/skills/shopify-products) |
+
+## Source: microsoft/power-platform-skills
+
+- Repository: [https://github.com/microsoft/power-platform-skills](https://github.com/microsoft/power-platform-skills) (commit `0d7ed9a`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `manage-flows` | adjacent | Manage flow lifecycle - publish, test, batch operations, inventory reports. Use when the user asks to publish, test, batch manage, or get an inventory of flows. | [source](https://github.com/microsoft/power-platform-skills/tree/0d7ed9a/plugins/power-automate/skills/manage-flows) |
+
+## Source: mohitagw15856/pm-claude-skills
+
+- Repository: [https://github.com/mohitagw15856/pm-claude-skills](https://github.com/mohitagw15856/pm-claude-skills) (commit `876fa30`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `credit-memo` | core | Write a credit memo for a lending decision: borrower story, facility structure, repayment sources, financial-ratio spread with covenant headroom, risk factors with mitigants, risk-rating rationale, and a recommendation. Use when asked to … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-banking/skills/credit-memo) |
+| `logistics-incident-report` | core | Write up a supply chain disruption — port delay, carrier failure, customs hold, or in-transit damage — as a decision-ready incident report. Use when asked to document a shipment delay, write up a logistics failure, report a customs hold, … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-supplychain/skills/logistics-incident-report) |
+| `demand-forecast-review` | core | Interrogate a demand forecast before the business commits supply and inventory to it. Use when asked to review a demand plan, challenge a forecast, check forecast accuracy, decompose baseline vs uplift, or find hockey sticks in the … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-supplychain/skills/demand-forecast-review) |
+| `bom-cost-review` | adjacent | Review a bill of materials for cost, risk, and supply exposure — cost rollup, top-10 cost drivers, single-source and EOL risk, MOQ vs forecast mismatch, cost-down candidates, and tariff/logistics sensitivity. Use when asked to review a … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-hardware/skills/bom-cost-review) |
+
+## Source: mukul975/Anthropic-Cybersecurity-Skills
+
+- Repository: [https://github.com/mukul975/Anthropic-Cybersecurity-Skills](https://github.com/mukul975/Anthropic-Cybersecurity-Skills) (commit `673da1f`, retrieved 2026-07-14)
+- License: Apache-2.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `analyzing-sbom-for-supply-chain-vulnerabilities` | core | Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/analyzing-sbom-for-supply-chain-vulnerabilities) |
+| `implementing-code-signing-for-artifacts` | core | This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/implementing-code-signing-for-artifacts) |
+| `implementing-supply-chain-security-with-in-toto` | core | Implement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/implementing-supply-chain-security-with-in-toto) |
+| `managing-third-party-vendor-risk` | core | Build and run a third-party / vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM and NIST CSF 2.0 GV.SC: inventory and tier vendors by risk, send the right due-diligence questionnaire (SIG, CAIQ), review evidence (SOC … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/managing-third-party-vendor-risk) |
+| `analyzing-supply-chain-malware-artifacts` | core | Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/analyzing-supply-chain-malware-artifacts) |
+| `detecting-supply-chain-attacks-in-ci-cd` | core | Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/detecting-supply-chain-attacks-in-ci-cd) |
+| `hunting-for-supply-chain-compromise` | core | Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/hunting-for-supply-chain-compromise) |
+| `performing-supply-chain-attack-simulation` | core | Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/performing-supply-chain-attack-simulation) |
+| `securing-github-actions-workflows` | core | This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets from … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/securing-github-actions-workflows) |
+| `verifying-build-provenance-with-slsa-sigstore` | core | Verify signed artifacts and SLSA build provenance with Sigstore cosign and slsa-verifier, enforce keyless OIDC identity, and apply SLSA Build levels to harden the software supply chain. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/verifying-build-provenance-with-slsa-sigstore) |
+
+## Source: nexscope-ai/eCommerce-Skills
+
+- Repository: [https://github.com/nexscope-ai/eCommerce-Skills](https://github.com/nexscope-ai/eCommerce-Skills) (commit `56f3288`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `supply-chain-optimization-shopify` | core | Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV analysis, 3PL cost optimization, and ad spend benchmarks. No API key required for … | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/supply-chain-optimization/supply-chain-optimization-shopify) |
+| `supply-chain-optimization-tiktok` | core | Supply Chain Bottleneck Analyzer for TikTok Shop sellers. Diagnose cash flow, inventory turnover, affiliate commissions, and return rates. Includes FBT cost analysis, influencer payout optimization, and viral product lifecycle management. … | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/supply-chain-optimization/supply-chain-optimization-tiktok) |
+| `supply-chain-optimization-walmart` | core | Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers. Diagnose cash flow, inventory, WFS costs, and referral fees. Includes comparison with Amazon FBA, lower storage fee optimization, and Walmart Connect ad spend analysis. No … | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/supply-chain-optimization/supply-chain-optimization-walmart) |
+| `supply-chain-optimization-amazon-lite` | core | Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/supply-chain-optimization/supply-chain-optimization-amazon) |
+| `dropshipping-product-research` | adjacent | Product research for dropshipping businesses. Identify profitable products with reliable suppliers, healthy margins, and manageable competition. Evaluates shipping times, return risk, and marketing viability. | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/dropshipping-product-research) |
+
+## Source: ognjengt/founder-skills
+
+- Repository: [https://github.com/ognjengt/founder-skills](https://github.com/ognjengt/founder-skills) (commit `a45931c`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `strategic-planning` | core | Analyzes the founder's business context to deliver the 3 highest-impact next moves for growth (marketing or sales). Asks up to 10 diagnostic questions when needed to uncover bottlenecks, struggles, and opportunities. Use when user needs … | [source](https://github.com/ognjengt/founder-skills/tree/a45931c/skills/strategic-planning) |
+
+## Source: open-gitagent/opengap
+
+- Repository: [https://github.com/open-gitagent/opengap](https://github.com/open-gitagent/opengap) (commit `d7a8e2e`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `document-review` | core | Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … | [source](https://github.com/open-gitagent/opengap/tree/d7a8e2e/examples/full/skills/document-review) |
+
+## Source: rampstackco/claude-skills
+
+- Repository: [https://github.com/rampstackco/claude-skills](https://github.com/rampstackco/claude-skills) (commit `bc6d961`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `data-warehouse-experimentation` | core | Running experiments out of the data warehouse instead of via dedicated experiment platforms. SQL-based assignment, exposure logging discipline, metric definitions in dbt models, statistical analysis in SQL or Python, variance reduction … | [source](https://github.com/rampstackco/claude-skills/tree/bc6d961/skills/data-warehouse-experimentation) |
+
+## Source: secondsky/claude-skills
+
+- Repository: [https://github.com/secondsky/claude-skills](https://github.com/secondsky/claude-skills) (commit `c4889f6`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `dependency-upgrade` | core | Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks. | [source](https://github.com/secondsky/claude-skills/tree/c4889f6/plugins/dependency-upgrade/skills/dependency-upgrade) |
+
+## Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
+
+- Repository: [https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance](https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance) (commit `71d8920`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `cis-controls` | core | Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, … | [source](https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/71d8920/plugins/cis-controls/skills/cis-controls) |
+
+## Source: trailofbits/skills
+
+- Repository: [https://github.com/trailofbits/skills](https://github.com/trailofbits/skills) (commit `cfe5d7b`, retrieved 2026-07-14)
+- License: custom (see upstream LICENSE)
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `supply-chain-risk-auditor` | core | Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements. | [source](https://github.com/trailofbits/skills/tree/cfe5d7b/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor) |
--- a/references/profile.md
+++ b/references/profile.md
@@ -0,0 +1,25 @@
+# Occupation profile — pharmaceutical goods distribution manager
+
+- **ESCO URI:** http://data.europa.eu/esco/occupation/24af7ff6-bd84-43a6-8cba-e60776f956f5
+- **ESCO code:** 1324.3.1.6.25
+- **ISCO-08 group:** 1324 — Supply, distribution and related managers
+
+## Description (ESCO)
+
+Pharmaceutical goods distribution managers plan the distribution of pharmaceutical gooods to various points of sales.
+
+## Definition
+
+nan
+
+## Alternative labels
+
+- pharmaceutical goods supply chain planner
+- pharmaceutical goods logistics manager
+- assistant pharmaceutical goods distribution manager
+- pharmaceutical goods logistics planner
+- senior pharmaceutical goods distribution manager
+- pharmaceutical goods supply chain manager
+- pharmaceutical goods distribution planner
+- graduate pharmaceutical goods distribution manager
+- trainee pharmaceutical goods distribution manager
--- a/references/skills.md
+++ b/references/skills.md
@@ -0,0 +1,35 @@
+# Competences — pharmaceutical goods distribution manager
+
+Source: ESCO v1.2.1 occupation-skill relations (http://data.europa.eu/esco/occupation/24af7ff6-bd84-43a6-8cba-e60776f956f5).
+
+## Essential
+
+- **adhere to organisational guidelines** (skill/competence)
+- **analyse supply chain trends** (skill/competence)
+- **carry out inventory control accuracy** (skill/competence)
+- **carry out statistical forecasts** (skill/competence)
+- **communicate with shipment forwarders** (skill/competence)
+- **create solutions to problems** (skill/competence)
+- **develop financial statistics reports** (skill/competence)
+- **ensure customs compliance** (skill/competence)
+- **ensure regulatory compliance concerning distribution activities** (skill/competence)
+- **freight transport methods** (knowledge)
+- **handle carriers** (skill/competence)
+- **have computer literacy** (skill/competence)
+- **hazardous freight regulations** (knowledge)
+- **implement strategic planning** (skill/competence)
+- **manage financial risk** (skill/competence)
+- **manage freight payment methods** (skill/competence)
+- **manage staff** (skill/competence)
+- **minimise shipping cost** (skill/competence)
+- **perform financial risk management in international trade** (skill/competence)
+- **perform multiple tasks at the same time** (skill/competence)
+- **perform risk analysis** (skill/competence)
+- **pharmaceutical products** (knowledge)
+- **plan transport operations** (skill/competence)
+- **supply chain management** (knowledge)
+- **track shipments** (skill/competence)
+- **track shipping sites** (skill/competence)
+
+## Optional
+
--- a/references/tasks.md
+++ b/references/tasks.md
@@ -0,0 +1,62 @@
+# Tasks & work activities — pharmaceutical goods distribution manager
+
+Source: O*NET 30.3, occupation 11-3071.04 (Supply Chain Managers) — manual nearest-occupation mapping via ISCO group 1324; the official ESCO crosswalk has no entry for this ESCO occupation.
+
+## Task statements
+
+- **[Core]** Select transportation routes to maximize economy by combining shipments or consolidating warehousing and distribution.
+- **[Core]** Diagram supply chain models to help facilitate discussions with customers.
+- **[Core]** Negotiate prices and terms with suppliers, vendors, or freight forwarders.
+- **[Core]** Meet with suppliers to discuss performance metrics, to provide performance feedback, or to discuss production forecasts or changes.
+- **[Core]** Document physical supply chain processes, such as workflows, cycle times, position responsibilities, or system flows.
+- **[Core]** Develop or implement procedures or systems to evaluate or select suppliers.
+- **[Core]** Design or implement plant warehousing strategies for production materials or finished products.
+- **[Core]** Confer with supply chain planners to forecast demand or create supply plans that ensure availability of materials or products.
+- **[Core]** Define performance metrics for measurement, comparison, or evaluation of supply chain factors, such as product cost or quality.
+- **[Core]** Analyze inventories to determine how to increase inventory turns, reduce waste, or optimize customer service.
+- **[Core]** Analyze information about supplier performance or procurement program success.
+- **[Core]** Participate in the coordination of engineering changes, product line extensions, or new product launches to ensure orderly and timely transitions in material or production flow.
+- **[Core]** Develop procedures for coordination of supply chain management with other functional areas, such as sales, marketing, finance, production, or quality assurance.
+- **[Core]** Design or implement supply chains that support business strategies adapted to changing market conditions, new business opportunities, or cost reduction strategies.
+- **[Supplemental]** Conduct or oversee the conduct of life cycle analyses to determine the environmental impacts of products, processes, or systems.
+- **[Core]** Design or implement supply chains that support environmental policies.
+- **[Core]** Design, implement, or oversee product take back or reverse logistics programs to ensure products are recycled, reused, or responsibly disposed.
+- **[Core]** Evaluate and select information or other technology solutions to improve tracking and reporting of materials or products distribution, storage, or inventory.
+- **[Core]** Identify opportunities to reuse or recycle materials to minimize consumption of new materials, minimize waste, or to convert wastes to by-products.
+- **[Supplemental]** Investigate or review the carbon footprints and environmental performance records of current or potential storage and distribution service providers.
+- **[Supplemental]** Locate or select biodegradable, non-toxic, or other environmentally friendly raw materials for manufacturing processes.
+- **[Core]** Review or update supply chain practices in accordance with new or changing environmental policies, standards, regulations, or laws.
+- **[Core]** Determine appropriate equipment and staffing levels to load, unload, move, or store materials.
+- **[Core]** Manage activities related to strategic or tactical purchasing, material requirements planning, controlling inventory, warehousing, or receiving.
+- **[Core]** Implement new or improved supply chain processes to improve efficiency or performance.
+- **[Core]** Monitor suppliers' activities to assess performance in meeting quality or delivery requirements.
+- **[Core]** Monitor forecasts and quotas to identify changes and predict effects on supply chain activities.
+- **[Core]** Identify or qualify new suppliers in collaboration with other departments, such as procurement, engineering, or quality assurance.
+- **[Supplemental]** Forecast material costs or develop standard cost lists.
+- **[Supplemental]** Appraise vendor manufacturing capabilities through on-site observations or other measurements.
+
+## Detailed work activities
+
+- Analyze data to assess operational or project effectiveness.
+- Analyze data to inform operational decisions or activities.
+- Confer with organizational members to accomplish work activities.
+- Coordinate with external parties to exchange information.
+- Develop operating strategies, plans, or procedures.
+- Develop organizational goals or objectives.
+- Develop organizational methods or procedures.
+- Develop procedures to evaluate organizational activities.
+- Develop sustainable organizational policies or practices.
+- Document organizational or operational procedures.
+- Estimate cost or material requirements.
+- Estimate labor requirements.
+- Evaluate environmental impact of operational or development activities.
+- Evaluate potential of products, technologies, or resources.
+- Evaluate quality of materials or products.
+- Identify opportunities for green initiatives.
+- Implement organizational process or policy changes.
+- Implement transportation changes to reduce environmental impact.
+- Manage inventories of products or organizational resources.
+- Manage operations, research, or logistics projects.
+- Monitor external affairs or events affecting business operations.
+- Monitor performance of organizational members or partners.
+- Negotiate contracts for transportation, distribution, or logistics services.
--- a/references/tools.md
+++ b/references/tools.md
@@ -0,0 +1,65 @@
+# Tools & technology — pharmaceutical goods distribution manager
+
+Source: O*NET 30.3, occupation 11-3071.04 (Supply Chain Managers) — manual nearest-occupation mapping via ISCO group 1324; the official ESCO crosswalk has no entry for this ESCO occupation.
+
+| Software | Category | Hot technology |
+|---|---|---|
+| MEDITECH software | Medical software | yes |
+| Microsoft Access | Data base user interface and query software | yes |
+| Microsoft Excel | Spreadsheet software | yes |
+| Microsoft Office software | Office suite software | yes |
+| Microsoft Outlook | Electronic mail software | yes |
+| Microsoft PowerPoint | Presentation software | yes |
+| Microsoft Project | Project management software | yes |
+| Microsoft SharePoint | Document management software | yes |
+| Microsoft SQL Server | Data base user interface and query software | yes |
+| Microsoft Visio | Process mapping and design software | yes |
+| Microsoft Word | Word processing software | yes |
+| Oracle PeopleSoft | Enterprise resource planning ERP software | yes |
+| SAP software | Enterprise resource planning ERP software | yes |
+| Structured query language SQL | Data base user interface and query software | yes |
+| Adexa Supply Chain Planning | Materials requirements planning logistics and supply chain software |  |
+| Advanced business application programming ABAP | Object or component oriented development software |  |
+| Aldata Warehouse Management | Materials requirements planning logistics and supply chain software |  |
+| CDC Supply Chain | Materials requirements planning logistics and supply chain software |  |
+| Dex Warehouse | Materials requirements planning logistics and supply chain software |  |
+| Epicor SRM | Materials requirements planning logistics and supply chain software |  |
+| Epicor WMS | Materials requirements planning logistics and supply chain software |  |
+| Graphics software | Graphics or photo imaging software |  |
+| HighJump Software Supply Chain Advantage | Materials requirements planning logistics and supply chain software |  |
+| HighJump Warehouse Advantage | Materials requirements planning logistics and supply chain software |  |
+| i2 Collaborative Supply Execution | Materials requirements planning logistics and supply chain software |  |
+| i2 Intelligence | Materials requirements planning logistics and supply chain software |  |
+| i2 Supply Chain Visibility | Materials requirements planning logistics and supply chain software |  |
+| IBM ILOG Inventory Analyst | Inventory management software |  |
+| IBM ILOG LogicNet Plus XE | Materials requirements planning logistics and supply chain software |  |
+| IBS MRP | Materials requirements planning logistics and supply chain software |  |
+| IBS Supply Chain Management | Materials requirements planning logistics and supply chain software |  |
+| IFS Applications for Supply Chain Management | Materials requirements planning logistics and supply chain software |  |
+| Infor Lawson Supply Chain Management | Materials requirements planning logistics and supply chain software |  |
+| Infor SCM | Materials requirements planning logistics and supply chain software |  |
+| Inventory management systems | Inventory management software |  |
+| JDA Master Planning | Materials requirements planning logistics and supply chain software |  |
+| Lawson S3 Supply Chain Management | Materials requirements planning logistics and supply chain software |  |
+| Manhattan Scale | Materials requirements planning logistics and supply chain software |  |
+| Manhattan Supply Chain Process Platform | Materials requirements planning logistics and supply chain software |  |
+| Master scheduling software | Calendar and scheduling software |  |
+| Microsoft Dynamics | Enterprise resource planning ERP software |  |
+| Microsoft Dynamics AX | Enterprise resource planning ERP software |  |
+| Minitab | Analytical or scientific software |  |
+| NetSuite ERP | Enterprise resource planning ERP software |  |
+| Oracle E-Business Suite Financials | Financial analysis software |  |
+| Oracle e-Business Suite Supply Chain Management | Materials requirements planning logistics and supply chain software |  |
+| Oracle Hyperion | Enterprise resource planning ERP software |  |
+| Oracle Inventory | Inventory management software |  |
+| Oracle JD Edwards EnterpriseOne | Enterprise resource planning ERP software |  |
+| Purchasing software | Procurement software |  |
+| QAD Adaptive ERP | Materials requirements planning logistics and supply chain software |  |
+| Red Prarie Warehouse Management | Materials requirements planning logistics and supply chain software |  |
+| SAP APO | Analytical or scientific software |  |
+| SAP business and customer relations management software | Enterprise resource planning ERP software |  |
+| SAP BusinessObjects Crystal Reports | Data base reporting software |  |
+| SAP SCM | Materials requirements planning logistics and supply chain software |  |
+| Simulation and modeling software | Analytical or scientific software |  |
+| Swisslog WarehouseManager | Materials requirements planning logistics and supply chain software |  |
+| Warehouse management system WMS | Materials requirements planning logistics and supply chain software |  |