Files
purchaser/references/ai-skills.md
2026-08-14 18:27:22 +02:00

35 KiB
Raw Permalink Blame History

External AI agent skills — purchaser

Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.

Tiers: core = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; adjacent = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package.

Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by pipeline/p5_enrich_ai_skills.py on 2026-07-14.

Source: anthropics/skills

  • Repository: https://github.com/anthropics/skills (commit f6656c1, retrieved 2026-07-14)
  • License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
Skill Tier What it adds Upstream
docx adjacent Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … source
pdf adjacent Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … source

Source: a5c-ai/babysitter

Skill Tier What it adds Upstream
inventory-optimizer core Inventory management optimization skill with safety stock calculation, reorder point determination, and ABC analysis source
cycle-count-scheduler core AI-driven cycle counting schedule and variance analysis skill to maintain inventory accuracy with minimal operational disruption source
cost-to-serve-analyzer core Supply chain cost-to-serve analysis skill by customer, product, or channel source
transportation-spend-analyzer core Freight spend analysis and benchmarking skill for cost optimization and carrier negotiation support source
tco-calculator core Total Cost of Ownership calculation skill for comprehensive supplier and sourcing decision analysis source
early-warning-monitor core Continuous supplier and supply chain risk monitoring with automated alerts source
fifo-lifo-controller core Automated inventory rotation management skill ensuring proper product flow based on expiration, production, or receipt dates source
abc-xyz-classifier core Multi-dimensional inventory classification skill combining value (ABC) and demand variability (XYZ) analysis for differentiated policies source
api-inventory-scanner core Discover and document existing API endpoints from code, logs, and traffic analysis source
supplier-scorecard-engine core Automated supplier performance scorecard generation with KPI tracking and trend analysis source
throughput-accountant core TOC financial metrics skill for throughput, inventory, and operating expense analysis with decision support source
master-data-quality-manager core Supply chain master data quality monitoring and improvement skill source

Source: affaan-m/everything-claude-code

Skill Tier What it adds Upstream
quality-nonconformance core Codified expertise for quality control, non-conformance investigation, root cause analysis, corrective action, and supplier quality management in regulated manufacturing. Informed by quality engineers with 15+ years experience across FDA, … source
energy-procurement core 電気とガス調達、料金最適化、需要料金管理、再生可能エネルギーPPA評価、およびマルチファシリティーエネルギー戦略のための符号化された専門知識。 Codified expertise for electricity and gas procurement, tariff optimization, demand charge management, renewable PPA evaluation, and multi-facility energy cost … source

Source: ahacker-1/cre-agent-skills

Skill Tier What it adds Upstream
cre-office core CRE Office analysis suite - 8 specialist skills for U.S. office acquisitions, refinancings, lease-up, tenant credit, TI/LC underwriting, financing fit, and investment committee memo writing. source

Source: alirezarezvani/claude-skills

Skill Tier What it adds Upstream
process-mapper core Use when a BizOps lead, COO, or process-improvement owner needs to document an end-to-end business process (procurement, employee onboarding, incident handoff, customer-onboarding, claims adjudication) in BPMN-style notation, measure cycle … source
business-operations-skills core Use when running, diagnosing, or designing internal business operations — process documentation, vendor SLAs, capacity planning, internal comms, SOP/runbook authoring, procurement spend. Triggers on "BizOps review", "where's the … source

Source: avelikiy/great_cto

Skill Tier What it adds Upstream
vertical-logistics core Domain knowledge for the logistics & supply-chain vertical (SMB shipping & inventory) so architect and pm don't spec naively. Covers the vocabulary (TMS vs WMS, multi-carrier rate shopping, dimensional weight, BOL/ASN, lot/batch, reorder … source

Source: davepoon/buildwithclaude

Skill Tier What it adds Upstream
docx core Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … source

Source: davila7/claude-code-templates

Skill Tier What it adds Upstream
vulnerability-scanner core Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization. source
benchling-integration core Benchling R&D platform integration. Access registry (DNA, proteins), inventory, ELN entries, workflows via API, build Benchling Apps, query Data Warehouse, for lab data management automation. source
code-review-excellence core Transform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and collaborative improvement. source
Excel Analysis core Analyze Excel spreadsheets, create pivot tables, generate charts, and perform data analysis. Use when analyzing Excel files, spreadsheets, tabular data, or .xlsx files. source

Source: hypnguyen1209/offensive-claude

Skill Tier What it adds Upstream
vulnerability-analysis core Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks source
cicd-supply-chain core Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance source

Source: jeremylongshore/claude-code-plugins-plus-skills

Skill Tier What it adds Upstream
flexport-data-handling core Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … source
volt-recon core Firmware reconnaissance for takeover — inventory the MCU, peripherals, RTOS, protocols, OTA, power management, and assess code quality with risk flags. Use when asked to "understand this firmware", "device inventory", or "embedded … source
warden-recon core Security reconnaissance — full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps. Use when asked about "security posture", "how secure is this", or "security assessment". source
webflow-core-workflow-b core Execute Webflow secondary workflows \u2014 Sites management, Pages API,\ \ Forms submissions,\nEcommerce (products/orders/inventory), and Custom Code via\ \ the Data API v2.\nUse when managing sites, reading pages, handling form data,\ \ … source
flexport-core-workflow-a core Execute Flexport primary workflow: shipment booking and purchase order management. Use when creating bookings, managing purchase orders, tracking freight, or building the core shipment lifecycle integration. Trigger: "flexport booking", … source
snowflake-cost-tuning core Optimize Snowflake costs with resource monitors, warehouse auto-suspend, right-sizing, and credit consumption analysis. Use when analyzing Snowflake billing, reducing credit consumption, or implementing cost controls and budget alerts. … source
excel-lbo-modeler core Build leveraged buyout (LBO) models in Excel with debt schedules and IRR analysis. Use when structuring LBO transactions or analyzing PE returns. Trigger with phrases like ''excel lbo'', ''build lbo model'', ''calculate pe returns''. source
excel-variance-analyzer core Analyze budget vs actual variances in Excel with drill-down and root cause analysis. Use when performing variance analysis or explaining budget differences. Trigger with phrases like ''excel variance'', ''analyze budget variance'', … source
flexport-deploy-integration core Deploy Flexport logistics integrations to Vercel, Fly.io, and Cloud Run. Use when deploying shipment tracking dashboards, webhook receivers, or supply chain automation services to production infrastructure. Trigger: "deploy flexport", … source
flexport-prod-checklist core Execute Flexport production deployment checklist for logistics integrations. Use when deploying shipment tracking, booking automation, or supply chain integrations to production with proper monitoring and rollback. Trigger: "flexport … source

Source: microsoft/skills

Skill Tier What it adds Upstream
azure-mgmt-apicenter-dotnet core Azure API Center SDK for .NET. Centralized API inventory management with governance, versioning, and discovery. Use for creating API services, workspaces, APIs, versions, definitions, environments, deployments, and metadata schemas. … source
azure-mgmt-apicenter-py core Azure API Center Management SDK for Python. Use for managing API inventory, metadata, and governance across your organization. Triggers: "azure-mgmt-apicenter", "ApiCenterMgmtClient", "API Center", "API inventory", "API governance". source

Source: mohitagw15856/pm-claude-skills

Skill Tier What it adds Upstream
vendor-evaluation core Create a structured vendor evaluation framework for any procurement decision. Use when asked to evaluate vendors, compare suppliers, run an RFP scoring process, or assess a software or service provider. Produces a weighted scorecard, … source
kyc-escalation core Write an internal KYC/AML escalation memo: a factual time-stamped trigger description, customer-profile vs activity mismatch analysis, red-flag taxonomy mapping, outstanding information, and a recommendation with rationale. Use when asked … source
rfp-scoring-matrix core Build a weighted RFP evaluation matrix and defensible award recommendation. Use when asked to score RFP responses, compare vendor bids, build a supplier evaluation matrix, run a sourcing event scorecard, or decide which bidder to award. … source

Source: mukul975/Anthropic-Cybersecurity-Skills

Skill Tier What it adds Upstream
analyzing-macro-malware-in-office-documents core Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … source
managing-third-party-vendor-risk core Build and run a third-party / vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM and NIST CSF 2.0 GV.SC: inventory and tier vendors by risk, send the right due-diligence questionnaire (SIG, CAIQ), review evidence (SOC … source
performing-api-inventory-and-discovery core Performs API inventory and discovery to identify all API endpoints in an organization''s environment including documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning, DNS … source
detecting-shadow-api-endpoints core Discover and inventory shadow API endpoints that operate outside documented specifications using traffic analysis, code scanning, and API discovery platforms. source
analyzing-sbom-for-supply-chain-vulnerabilities core Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk … source
analyzing-linux-kernel-rootkits core Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, … source
analyzing-supply-chain-malware-artifacts core Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise. source
implementing-code-signing-for-artifacts core This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific … source
analyzing-memory-forensics-with-lime-and-volatility core Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux … source
conducting-memory-forensics-with-volatility core Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, … source
detecting-process-injection-techniques core Detects and analyzes process injection techniques used by malware including classic DLL injection, process hollowing, APC injection, thread hijacking, and reflective loading. Uses memory forensics, API monitoring, and behavioral analysis … source
hunting-for-supply-chain-compromise core Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. source

Source: nexscope-ai/eCommerce-Skills

Skill Tier What it adds Upstream
supply-chain-optimization-tiktok core Supply Chain Bottleneck Analyzer for TikTok Shop sellers. Diagnose cash flow, inventory turnover, affiliate commissions, and return rates. Includes FBT cost analysis, influencer payout optimization, and viral product lifecycle management. … source
supply-chain-optimization-shopify core Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV analysis, 3PL cost optimization, and ad spend benchmarks. No API key required for … source
shopify-inventory-management core Multi-location inventory — transfers, low stock alerts, demand forecasting, safety stock, ABC analysis source
supply-chain-optimization-walmart core Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers. Diagnose cash flow, inventory, WFS costs, and referral fees. Includes comparison with Amazon FBA, lower storage fee optimization, and Walmart Connect ad spend analysis. No … source
ecommerce-returns-management core Optimize e-commerce returns process and reduce return rates. Returns policy design, reverse logistics, root cause analysis, and customer retention through better returns experience. source
tiktok-shop-inventory core Inventory management for TikTok Shop — demand forecasting, viral stock planning, FBT optimization source
warehouse-optimization core E-commerce warehouse and inventory optimization advisor. Analyzes inventory health, calculates safety stock and reorder points, performs ABC analysis, evaluates fulfillment costs, and provides actionable recommendations for improving … source
inventory-tracking-software core source
supply-chain-optimization-amazon-lite core Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation source

Source: OpenSenseNova/SenseNova-Skills

Skill Tier What it adds Upstream
category-filtering-and-difficulty-analysis core 对Excel数据进行自定义分类统计、交叉分析与可视化并基于多维度指标如文本长度、术语密度、正则匹配等进行综合评分与分级适用于多类别数据分布统计及文本内容难度/质量评估场景。 source
dynamic-large-file-parquet-analysis core 动态统计Excel总行数当数据量过大≥10000行时自动转换为Parquet格式加速读取并对指定目标列进行条件筛选、分类汇总与结果导出适用于超大体积Excel文件的快速读取与统计分析。 source
dynamic-percentage-and-large-file-analysis core 根据文件行数动态切换大文件处理策略Parquet转换通过逐行扫描或列匹配提取关键指标并计算占比、均值等统计量最终输出结构化Excel报告及可视化图表。 source
excel-data-analysis-and-report-generation core 从Excel提取多类型数据并生成包含可视化图表与下载链接的综合分析报告。 source
excel-multi-sheet-dynamic-analysis core 用于分析包含多个Sheet的Excel文件动态判断数据量级以决定是否转换为Parquet进行大文件处理并支持跨Sheet的特定字段统计、数据清洗、交叉分析与可视化最终生成带下载链接的汇总报告。 source
excel-multi-sheet-threshold-analysis core 统计多Sheet Excel总行数并根据规模选择处理策略提取特定维度信息进行去重统计并生成摘要与明细报表。 source
excel-smart-analysis-and-cleaning core 对多 Sheet Excel 进行智能清洗、跨表核对与可视化分析。。 source
excel-threshold-analysis-and-styling core 根据 Excel 数据量级自动判断处理策略,执行数值列清洗、条件过滤,并使用 openpyxl 对符合条件的单元格进行样式标记与导出。 source
group-by-analysis core 对多 Sheet 的 Excel 文件进行行数统计、大文件 Parquet 转换预处理、数据清洗及分组聚合分析,并生成带样式标记的统计表与可视化图表。 source

Source: rampstackco/claude-skills

Skill Tier What it adds Upstream
data-warehouse-experimentation core Running experiments out of the data warehouse instead of via dedicated experiment platforms. SQL-based assignment, exposure logging discipline, metric definitions in dbt models, statistical analysis in SQL or Python, variance reduction … source

Source: sanjay3290/ai-skills

Skill Tier What it adds Upstream
deep-research core Execute autonomous multi-step research using Google Gemini Deep Research Agent. Use for: market analysis, competitive landscaping, literature reviews, technical research, due diligence. Takes 2-10 minutes but produces detailed, cited … source

Source: snyk/agent-scan

Skill Tier What it adds Upstream
docx core Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … source

Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Tier What it adds Upstream
cis-controls core Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, … source
ism core Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD … source
nzism core Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap analysis, agency security obligations, classification framework (Unclassified through … source

Source: ThinkInAIXYZ/deepchat

Skill Tier What it adds Upstream
docx core Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … source

Source: wanshuiyin/Auto-claude-code-research-in-sleep

Skill Tier What it adds Upstream
system-profile core Profile a target (script, process, GPU, memory, interconnect) for performance analysis. Use when user says "profile", "benchmark", "bottleneck", or wants performance analysis. source