Files

37 KiB

External AI agent skills — pharmaceutical-goods-distribution-manager

Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.

Tiers: core = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; adjacent = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package.

Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by pipeline/p5_enrich_ai_skills.py on 2026-07-14.

Source: anthropics/skills

  • Repository: https://github.com/anthropics/skills (commit f6656c1, retrieved 2026-07-14)
  • License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
Skill Tier What it adds Upstream
docx adjacent Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … source
pdf adjacent Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … source

Source: wshobson/agents

Skill Tier What it adds Upstream
team-collaboration-dx-optimizer (agent) adjacent Developer Experience specialist. Improves tooling, setup, and workflows. Use PROACTIVELY when setting up new projects, after team feedback, or when development friction is noticed. source

Source: a5c-ai/babysitter

Skill Tier What it adds Upstream
early-warning-monitor core Continuous supplier and supply chain risk monitoring with automated alerts source
supply-chain-risk-assessor core Comprehensive supply chain risk identification and assessment skill with heat mapping source
cost-to-serve-analyzer core Supply chain cost-to-serve analysis skill by customer, product, or channel source
incoterms-compliance-checker core International shipping terms validation and documentation skill ensuring trade compliance source
iso14971-risk-analyzer core Comprehensive risk management skill implementing ISO 14971:2019 methodology for medical device risk analysis source
supply-chain-visibility-platform core End-to-end supply chain visibility skill providing real-time tracking and control tower capabilities source
contingency-plan-builder core Business continuity and contingency plan development skill for supply chain resilience source
population-health-stratification core Stratify patient populations by risk level using claims data, clinical data, and social determinants to prioritize care management interventions source
supply-chain-digital-twin core Digital twin representation of supply chain for real-time monitoring and simulation source
design-fmea-generator core Design Failure Mode and Effects Analysis (DFMEA) skill for systematic design risk identification source
disruption-response-coordinator core Supply chain disruption rapid response skill with impact assessment and mitigation activation source
freight-audit-validator core Automated freight bill validation skill with discrepancy detection and payment processing automation source

Source: affaan-m/everything-claude-code

Skill Tier What it adds Upstream
customs-trade-compliance core 通関書類、関税分類、関税最適化、制限当事者スクリーニング、複数の法域にわたる規制コンプライアンスのための成文化された専門知識。15年以上の経験を持つ貿易コンプライアンス専門家に情報。HS分類ロジック、インコターム適用、FTA利用、ペナルティ軽減を含みます。通関許可、関税分類、貿易コンプライアンス、輸入/輸出ドキュメント、または関税最適化を処理するときに使用します。 source
carrier-relationship-management adjacent Codified expertise for managing carrier portfolios, negotiating freight rates, tracking carrier performance, allocating freight, and maintaining strategic carrier relationships. Informed by transportation managers with 15+ years … source

Source: alirezarezvani/claude-skills

Skill Tier What it adds Upstream
risk-management-specialist core Medical device risk management specialist implementing ISO 14971 throughout product lifecycle. Provides risk analysis, risk evaluation, risk control, and post-production information analysis. Use when user mentions risk management, ISO … source
ceo-advisor core Executive leadership guidance for strategic decision-making, organizational development, and stakeholder management. Use when planning strategy, preparing board presentations, managing investors, developing organizational culture, making … source
fda-consultant-specialist core FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QMSR (21 CFR 820, which incorporates ISO 13485:2016 by reference since 2026-02-02; formerly QSR) compliance, HIPAA assessments, and … source
quality-documentation-manager adjacent Document control system management for medical device QMS. Covers document numbering, version control, change management, and 21 CFR Part 11 compliance. Use when working on document control procedures, change control workflows, document … source
social-media-manager adjacent When the user wants to develop social media strategy, plan content calendars, manage community engagement, or grow their social presence across platforms. Also use when the user mentions 'social media strategy,' 'social calendar,' … source

Source: avelikiy/great_cto

Skill Tier What it adds Upstream
vertical-logistics core Domain knowledge for the logistics & supply-chain vertical (SMB shipping & inventory) so architect and pm don't spec naively. Covers the vocabulary (TMS vs WMS, multi-carrier rate shopping, dimensional weight, BOL/ASN, lot/batch, reorder … source

Source: backnotprop/plannotator

Skill Tier What it adds Upstream
review-renovate core Review Renovate bot PRs that update GitHub Actions dependencies. Verifies supply chain integrity by checking pinned commit SHAs against upstream tagged releases, reviews changelogs for breaking changes, and confirms compatibility with … source
update-deps core Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping. Defers risky packages to ~/.supply-chain/notes/. source

Source: basicmachines-co/basic-memory

Skill Tier What it adds Upstream
memory-tasks adjacent Task management via Basic Memory schemas: create, track, and resume structured tasks that survive context compaction. Uses BM's schema system for uniform notes queryable through the knowledge graph. source

Source: brycewang-stanford/Auto-Empirical-Research-Skills

Skill Tier What it adds Upstream
enrichr-api core Perform gene set enrichment analysis using the Enrichr API source
hud adjacent Diverga HUD (Heads-Up Display) management skill. Configure and manage the research project statusline display. Supports multiple presets: research, checkpoint, memory, minimal. Triggers: "hud", "statusline", "display settings source

Source: davepoon/buildwithclaude

Skill Tier What it adds Upstream
google-calendar-automation adjacent Automate Google Calendar events, scheduling, availability checks, and attendee management via Rube MCP (Composio). Create events, find free slots, manage attendees, and list calendars programmatically. source
outlook-calendar-automation adjacent Automate Outlook Calendar tasks via Rube MCP (Composio): create events, manage attendees, find meeting times, and handle invitations. Always search tools first for current schemas. source

Source: davila7/claude-code-templates

Skill Tier What it adds Upstream
vulnerability-scanner core Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization. source
risk-management-specialist core Senior Risk Management specialist for medical device companies implementing ISO 14971 risk management throughout product lifecycle. Provides risk analysis, risk evaluation, risk control, and post-production information analysis. Use for … source
Excel Analysis core Analyze Excel spreadsheets, create pivot tables, generate charts, and perform data analysis. Use when analyzing Excel files, spreadsheets, tabular data, or .xlsx files. source
fda-consultant-specialist core Senior FDA consultant and specialist for medical device companies including HIPAA compliance and requirement management. Provides FDA pathway expertise, QSR compliance, cybersecurity guidance, and regulatory submission support. Use for FDA … source
supply-chain-guard core Detect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations. source
mdr-745-specialist adjacent EU MDR 2017/745 regulation specialist and consultant for medical device requirement management. Provides comprehensive MDR compliance expertise, gap analysis, technical documentation guidance, clinical evidence requirements, and … source
quality-manager-qms-iso13485 adjacent ISO 13485 Quality Management System specialist for medical device companies. Provides QMS implementation, maintenance, process optimization, and compliance expertise. Use for QMS design, documentation control, management review, internal … source

Source: dotnet/skills

Skill Tier What it adds Upstream
coverage-analysis core Project-wide code coverage and CRAP (Change Risk Anti-Patterns) score analysis for .NET projects. Calculates CRAP scores per method and surfaces risk hotspots — complex code with low coverage that is dangerous to modify. Use to diagnose … source

Source: googleworkspace/cli

Skill Tier What it adds Upstream
recipe-find-free-time core Query Google Calendar free/busy status for multiple users to find a meeting slot. source

Source: hypnguyen1209/offensive-claude

Skill Tier What it adds Upstream
vulnerability-analysis core Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks source
cicd-supply-chain core Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance source

Source: jeremylongshore/claude-code-plugins-plus-skills

Skill Tier What it adds Upstream
flexport-data-handling core Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … source
volt-recon core Firmware reconnaissance for takeover — inventory the MCU, peripherals, RTOS, protocols, OTA, power management, and assess code quality with risk flags. Use when asked to "understand this firmware", "device inventory", or "embedded … source
flexport-deploy-integration core Deploy Flexport logistics integrations to Vercel, Fly.io, and Cloud Run. Use when deploying shipment tracking dashboards, webhook receivers, or supply chain automation services to production infrastructure. Trigger: "deploy flexport", … source
flexport-prod-checklist core Execute Flexport production deployment checklist for logistics integrations. Use when deploying shipment tracking, booking automation, or supply chain integrations to production with proper monitoring and rollback. Trigger: "flexport … source
flexport-reference-architecture core Implement Flexport reference architecture for supply chain integrations with best-practice project layout, service boundaries, and data flow. Trigger: "flexport architecture", "flexport project structure", "flexport system design". source
flexport-hello-world core Create a minimal working Flexport example \u2014 list shipments and\ \ track containers.\nUse when starting a new Flexport integration, testing your\ \ setup,\nor learning the Flexport REST API v2 patterns.\nTrigger: "flexport hello\ \ … source
flexport-incident-runbook core Execute Flexport incident response for API outages, webhook failures, and supply chain data sync issues with triage and mitigation steps. Trigger: "flexport incident", "flexport outage", "flexport down", "flexport emergency". source
warden core Security engineer — IAM, secrets, threat modeling, hardening, auth, and supply chain security. source
abridge-reference-architecture core Implement Abridge reference architecture for clinical AI integration. Use when designing a new Abridge deployment, reviewing project structure, or planning multi-site health system rollouts with EHR integration. Trigger: "abridge … source
crest-narrative core Strategic narrative — write a standalone strategy memo that frames product direction, bets, and rationale for a planning horizon. Use when asked to "write a strategy doc", "product vision", "strategic narrative", "company strategy memo", … source
openrouter-debug-bundle core Create debug bundles for troubleshooting OpenRouter API issues. Use when diagnosing failures, unexpected responses, or latency problems. Triggers: ''openrouter debug'', ''openrouter troubleshoot'', ''debug openrouter request'', … source
snowflake-load-scale core Implement Snowflake load testing, warehouse scaling, and capacity planning. Use when testing query performance at scale, configuring multi-cluster warehouses, or planning capacity for production Snowflake workloads. Trigger with phrases … source

Source: jezweb/claude-skills

Skill Tier What it adds Upstream
shopify-products adjacent Create and manage Shopify products via the Admin GraphQL API or CSV import. Workflow: gather data, choose method, execute, verify. Use whenever the user wants to add products to Shopify, bulk-import a catalog from CSV/spreadsheet/URL, … source

Source: microsoft/power-platform-skills

Skill Tier What it adds Upstream
manage-flows adjacent Manage flow lifecycle - publish, test, batch operations, inventory reports. Use when the user asks to publish, test, batch manage, or get an inventory of flows. source

Source: mohitagw15856/pm-claude-skills

Skill Tier What it adds Upstream
credit-memo core Write a credit memo for a lending decision: borrower story, facility structure, repayment sources, financial-ratio spread with covenant headroom, risk factors with mitigants, risk-rating rationale, and a recommendation. Use when asked to … source
logistics-incident-report core Write up a supply chain disruption — port delay, carrier failure, customs hold, or in-transit damage — as a decision-ready incident report. Use when asked to document a shipment delay, write up a logistics failure, report a customs hold, … source
demand-forecast-review core Interrogate a demand forecast before the business commits supply and inventory to it. Use when asked to review a demand plan, challenge a forecast, check forecast accuracy, decompose baseline vs uplift, or find hockey sticks in the … source
bom-cost-review adjacent Review a bill of materials for cost, risk, and supply exposure — cost rollup, top-10 cost drivers, single-source and EOL risk, MOQ vs forecast mismatch, cost-down candidates, and tariff/logistics sensitivity. Use when asked to review a … source

Source: mukul975/Anthropic-Cybersecurity-Skills

Skill Tier What it adds Upstream
analyzing-sbom-for-supply-chain-vulnerabilities core Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk … source
implementing-code-signing-for-artifacts core This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific … source
implementing-supply-chain-security-with-in-toto core Implement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps. source
managing-third-party-vendor-risk core Build and run a third-party / vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM and NIST CSF 2.0 GV.SC: inventory and tier vendors by risk, send the right due-diligence questionnaire (SIG, CAIQ), review evidence (SOC … source
analyzing-supply-chain-malware-artifacts core Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise. source
detecting-supply-chain-attacks-in-ci-cd core Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for … source
hunting-for-supply-chain-compromise core Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. source
performing-supply-chain-attack-simulation core Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning … source
securing-github-actions-workflows core This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets from … source
verifying-build-provenance-with-slsa-sigstore core Verify signed artifacts and SLSA build provenance with Sigstore cosign and slsa-verifier, enforce keyless OIDC identity, and apply SLSA Build levels to harden the software supply chain. source

Source: nexscope-ai/eCommerce-Skills

Skill Tier What it adds Upstream
supply-chain-optimization-shopify core Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV analysis, 3PL cost optimization, and ad spend benchmarks. No API key required for … source
supply-chain-optimization-tiktok core Supply Chain Bottleneck Analyzer for TikTok Shop sellers. Diagnose cash flow, inventory turnover, affiliate commissions, and return rates. Includes FBT cost analysis, influencer payout optimization, and viral product lifecycle management. … source
supply-chain-optimization-walmart core Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers. Diagnose cash flow, inventory, WFS costs, and referral fees. Includes comparison with Amazon FBA, lower storage fee optimization, and Walmart Connect ad spend analysis. No … source
supply-chain-optimization-amazon-lite core Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation source
dropshipping-product-research adjacent Product research for dropshipping businesses. Identify profitable products with reliable suppliers, healthy margins, and manageable competition. Evaluates shipping times, return risk, and marketing viability. source

Source: ognjengt/founder-skills

Skill Tier What it adds Upstream
strategic-planning core Analyzes the founder's business context to deliver the 3 highest-impact next moves for growth (marketing or sales). Asks up to 10 diagnostic questions when needed to uncover bottlenecks, struggles, and opportunities. Use when user needs … source

Source: open-gitagent/opengap

Skill Tier What it adds Upstream
document-review core Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … source

Source: rampstackco/claude-skills

Skill Tier What it adds Upstream
data-warehouse-experimentation core Running experiments out of the data warehouse instead of via dedicated experiment platforms. SQL-based assignment, exposure logging discipline, metric definitions in dbt models, statistical analysis in SQL or Python, variance reduction … source

Source: secondsky/claude-skills

Skill Tier What it adds Upstream
dependency-upgrade core Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks. source

Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Tier What it adds Upstream
cis-controls core Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, … source

Source: trailofbits/skills

Skill Tier What it adds Upstream
supply-chain-risk-auditor core Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements. source