35 KiB
External AI agent skills — purchaser
Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.
Tiers: core = the skill directly exercises a top market hard
skill, tool or method (from gated job-ad evidence) or an essential
ESCO competence of this occupation; adjacent =
plausibly useful, secondary. Entries are capped at 12 per source
and 80 in total per occupation (core first,
strongest matches survive); everything beyond the caps is excluded
and logged in the pipeline audit trail, not in this package.
Matched deterministically (ISCO group + title/competence keywords,
tiered against market evidence + ESCO essentials) by
pipeline/p5_enrich_ai_skills.py on 2026-07-14.
Source: anthropics/skills
- Repository: https://github.com/anthropics/skills (commit
f6656c1, retrieved 2026-07-14) - License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | source |
pdf |
adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | source |
Source: a5c-ai/babysitter
- Repository: https://github.com/a5c-ai/babysitter (commit
44a5d58b, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
inventory-optimizer |
core | Inventory management optimization skill with safety stock calculation, reorder point determination, and ABC analysis | source |
cycle-count-scheduler |
core | AI-driven cycle counting schedule and variance analysis skill to maintain inventory accuracy with minimal operational disruption | source |
cost-to-serve-analyzer |
core | Supply chain cost-to-serve analysis skill by customer, product, or channel | source |
transportation-spend-analyzer |
core | Freight spend analysis and benchmarking skill for cost optimization and carrier negotiation support | source |
tco-calculator |
core | Total Cost of Ownership calculation skill for comprehensive supplier and sourcing decision analysis | source |
early-warning-monitor |
core | Continuous supplier and supply chain risk monitoring with automated alerts | source |
fifo-lifo-controller |
core | Automated inventory rotation management skill ensuring proper product flow based on expiration, production, or receipt dates | source |
abc-xyz-classifier |
core | Multi-dimensional inventory classification skill combining value (ABC) and demand variability (XYZ) analysis for differentiated policies | source |
api-inventory-scanner |
core | Discover and document existing API endpoints from code, logs, and traffic analysis | source |
supplier-scorecard-engine |
core | Automated supplier performance scorecard generation with KPI tracking and trend analysis | source |
throughput-accountant |
core | TOC financial metrics skill for throughput, inventory, and operating expense analysis with decision support | source |
master-data-quality-manager |
core | Supply chain master data quality monitoring and improvement skill | source |
Source: affaan-m/everything-claude-code
- Repository: https://github.com/affaan-m/everything-claude-code (commit
ed38744, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
quality-nonconformance |
core | Codified expertise for quality control, non-conformance investigation, root cause analysis, corrective action, and supplier quality management in regulated manufacturing. Informed by quality engineers with 15+ years experience across FDA, … | source |
energy-procurement |
core | 電気とガス調達、料金最適化、需要料金管理、再生可能エネルギーPPA評価、およびマルチファシリティーエネルギー戦略のための符号化された専門知識。 Codified expertise for electricity and gas procurement, tariff optimization, demand charge management, renewable PPA evaluation, and multi-facility energy cost … | source |
Source: ahacker-1/cre-agent-skills
- Repository: https://github.com/ahacker-1/cre-agent-skills (commit
618734e, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
cre-office |
core | CRE Office analysis suite - 8 specialist skills for U.S. office acquisitions, refinancings, lease-up, tenant credit, TI/LC underwriting, financing fit, and investment committee memo writing. | source |
Source: alirezarezvani/claude-skills
- Repository: https://github.com/alirezarezvani/claude-skills (commit
0241f43, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
process-mapper |
core | Use when a BizOps lead, COO, or process-improvement owner needs to document an end-to-end business process (procurement, employee onboarding, incident handoff, customer-onboarding, claims adjudication) in BPMN-style notation, measure cycle … | source |
business-operations-skills |
core | Use when running, diagnosing, or designing internal business operations — process documentation, vendor SLAs, capacity planning, internal comms, SOP/runbook authoring, procurement spend. Triggers on "BizOps review", "where's the … | source |
Source: avelikiy/great_cto
- Repository: https://github.com/avelikiy/great_cto (commit
4fe1e39, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vertical-logistics |
core | Domain knowledge for the logistics & supply-chain vertical (SMB shipping & inventory) so architect and pm don't spec naively. Covers the vocabulary (TMS vs WMS, multi-carrier rate shopping, dimensional weight, BOL/ASN, lot/batch, reorder … | source |
Source: davepoon/buildwithclaude
- Repository: https://github.com/davepoon/buildwithclaude (commit
3c94e0c, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
core | Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … | source |
Source: davila7/claude-code-templates
- Repository: https://github.com/davila7/claude-code-templates (commit
fa79251, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vulnerability-scanner |
core | Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization. | source |
benchling-integration |
core | Benchling R&D platform integration. Access registry (DNA, proteins), inventory, ELN entries, workflows via API, build Benchling Apps, query Data Warehouse, for lab data management automation. | source |
code-review-excellence |
core | Transform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and collaborative improvement. | source |
Excel Analysis |
core | Analyze Excel spreadsheets, create pivot tables, generate charts, and perform data analysis. Use when analyzing Excel files, spreadsheets, tabular data, or .xlsx files. | source |
Source: hypnguyen1209/offensive-claude
- Repository: https://github.com/hypnguyen1209/offensive-claude (commit
4d62be7, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vulnerability-analysis |
core | Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks | source |
cicd-supply-chain |
core | Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance | source |
Source: jeremylongshore/claude-code-plugins-plus-skills
- Repository: https://github.com/jeremylongshore/claude-code-plugins-plus-skills (commit
e112938a, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
flexport-data-handling |
core | Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … | source |
volt-recon |
core | Firmware reconnaissance for takeover — inventory the MCU, peripherals, RTOS, protocols, OTA, power management, and assess code quality with risk flags. Use when asked to "understand this firmware", "device inventory", or "embedded … | source |
warden-recon |
core | Security reconnaissance — full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps. Use when asked about "security posture", "how secure is this", or "security assessment". | source |
webflow-core-workflow-b |
core | Execute Webflow secondary workflows \u2014 Sites management, Pages API,\ \ Forms submissions,\nEcommerce (products/orders/inventory), and Custom Code via\ \ the Data API v2.\nUse when managing sites, reading pages, handling form data,\ \ … | source |
flexport-core-workflow-a |
core | Execute Flexport primary workflow: shipment booking and purchase order management. Use when creating bookings, managing purchase orders, tracking freight, or building the core shipment lifecycle integration. Trigger: "flexport booking", … | source |
snowflake-cost-tuning |
core | Optimize Snowflake costs with resource monitors, warehouse auto-suspend, right-sizing, and credit consumption analysis. Use when analyzing Snowflake billing, reducing credit consumption, or implementing cost controls and budget alerts. … | source |
excel-lbo-modeler |
core | Build leveraged buyout (LBO) models in Excel with debt schedules and IRR analysis. Use when structuring LBO transactions or analyzing PE returns. Trigger with phrases like ''excel lbo'', ''build lbo model'', ''calculate pe returns''. | source |
excel-variance-analyzer |
core | Analyze budget vs actual variances in Excel with drill-down and root cause analysis. Use when performing variance analysis or explaining budget differences. Trigger with phrases like ''excel variance'', ''analyze budget variance'', … | source |
flexport-deploy-integration |
core | Deploy Flexport logistics integrations to Vercel, Fly.io, and Cloud Run. Use when deploying shipment tracking dashboards, webhook receivers, or supply chain automation services to production infrastructure. Trigger: "deploy flexport", … | source |
flexport-prod-checklist |
core | Execute Flexport production deployment checklist for logistics integrations. Use when deploying shipment tracking, booking automation, or supply chain integrations to production with proper monitoring and rollback. Trigger: "flexport … | source |
Source: microsoft/skills
- Repository: https://github.com/microsoft/skills (commit
dc543aa, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
azure-mgmt-apicenter-dotnet |
core | Azure API Center SDK for .NET. Centralized API inventory management with governance, versioning, and discovery. Use for creating API services, workspaces, APIs, versions, definitions, environments, deployments, and metadata schemas. … | source |
azure-mgmt-apicenter-py |
core | Azure API Center Management SDK for Python. Use for managing API inventory, metadata, and governance across your organization. Triggers: "azure-mgmt-apicenter", "ApiCenterMgmtClient", "API Center", "API inventory", "API governance". | source |
Source: mohitagw15856/pm-claude-skills
- Repository: https://github.com/mohitagw15856/pm-claude-skills (commit
876fa30, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vendor-evaluation |
core | Create a structured vendor evaluation framework for any procurement decision. Use when asked to evaluate vendors, compare suppliers, run an RFP scoring process, or assess a software or service provider. Produces a weighted scorecard, … | source |
kyc-escalation |
core | Write an internal KYC/AML escalation memo: a factual time-stamped trigger description, customer-profile vs activity mismatch analysis, red-flag taxonomy mapping, outstanding information, and a recommendation with rationale. Use when asked … | source |
rfp-scoring-matrix |
core | Build a weighted RFP evaluation matrix and defensible award recommendation. Use when asked to score RFP responses, compare vendor bids, build a supplier evaluation matrix, run a sourcing event scorecard, or decide which bidder to award. … | source |
Source: mukul975/Anthropic-Cybersecurity-Skills
- Repository: https://github.com/mukul975/Anthropic-Cybersecurity-Skills (commit
673da1f, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
analyzing-macro-malware-in-office-documents |
core | Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … | source |
managing-third-party-vendor-risk |
core | Build and run a third-party / vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM and NIST CSF 2.0 GV.SC: inventory and tier vendors by risk, send the right due-diligence questionnaire (SIG, CAIQ), review evidence (SOC … | source |
performing-api-inventory-and-discovery |
core | Performs API inventory and discovery to identify all API endpoints in an organization''s environment including documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning, DNS … | source |
detecting-shadow-api-endpoints |
core | Discover and inventory shadow API endpoints that operate outside documented specifications using traffic analysis, code scanning, and API discovery platforms. | source |
analyzing-sbom-for-supply-chain-vulnerabilities |
core | Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk … | source |
analyzing-linux-kernel-rootkits |
core | Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, … | source |
analyzing-supply-chain-malware-artifacts |
core | Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise. | source |
implementing-code-signing-for-artifacts |
core | This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific … | source |
analyzing-memory-forensics-with-lime-and-volatility |
core | Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux … | source |
conducting-memory-forensics-with-volatility |
core | Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, … | source |
detecting-process-injection-techniques |
core | Detects and analyzes process injection techniques used by malware including classic DLL injection, process hollowing, APC injection, thread hijacking, and reflective loading. Uses memory forensics, API monitoring, and behavioral analysis … | source |
hunting-for-supply-chain-compromise |
core | Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. | source |
Source: nexscope-ai/eCommerce-Skills
- Repository: https://github.com/nexscope-ai/eCommerce-Skills (commit
56f3288, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
supply-chain-optimization-tiktok |
core | Supply Chain Bottleneck Analyzer for TikTok Shop sellers. Diagnose cash flow, inventory turnover, affiliate commissions, and return rates. Includes FBT cost analysis, influencer payout optimization, and viral product lifecycle management. … | source |
supply-chain-optimization-shopify |
core | Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV analysis, 3PL cost optimization, and ad spend benchmarks. No API key required for … | source |
shopify-inventory-management |
core | Multi-location inventory — transfers, low stock alerts, demand forecasting, safety stock, ABC analysis | source |
supply-chain-optimization-walmart |
core | Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers. Diagnose cash flow, inventory, WFS costs, and referral fees. Includes comparison with Amazon FBA, lower storage fee optimization, and Walmart Connect ad spend analysis. No … | source |
ecommerce-returns-management |
core | Optimize e-commerce returns process and reduce return rates. Returns policy design, reverse logistics, root cause analysis, and customer retention through better returns experience. | source |
tiktok-shop-inventory |
core | Inventory management for TikTok Shop — demand forecasting, viral stock planning, FBT optimization | source |
warehouse-optimization |
core | E-commerce warehouse and inventory optimization advisor. Analyzes inventory health, calculates safety stock and reorder points, performs ABC analysis, evaluates fulfillment costs, and provides actionable recommendations for improving … | source |
inventory-tracking-software |
core | — | source |
supply-chain-optimization-amazon-lite |
core | Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation | source |
Source: OpenSenseNova/SenseNova-Skills
- Repository: https://github.com/OpenSenseNova/SenseNova-Skills (commit
d8bb438, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
category-filtering-and-difficulty-analysis |
core | 对Excel数据进行自定义分类统计、交叉分析与可视化,并基于多维度指标(如文本长度、术语密度、正则匹配等)进行综合评分与分级,适用于多类别数据分布统计及文本内容难度/质量评估场景。 | source |
dynamic-large-file-parquet-analysis |
core | 动态统计Excel总行数,当数据量过大(≥10000行)时自动转换为Parquet格式加速读取,并对指定目标列进行条件筛选、分类汇总与结果导出,适用于超大体积Excel文件的快速读取与统计分析。 | source |
dynamic-percentage-and-large-file-analysis |
core | 根据文件行数动态切换大文件处理策略(Parquet转换),通过逐行扫描或列匹配提取关键指标并计算占比、均值等统计量,最终输出结构化Excel报告及可视化图表。 | source |
excel-data-analysis-and-report-generation |
core | 从Excel提取多类型数据,并生成包含可视化图表与下载链接的综合分析报告。 | source |
excel-multi-sheet-dynamic-analysis |
core | 用于分析包含多个Sheet的Excel文件,动态判断数据量级以决定是否转换为Parquet进行大文件处理,并支持跨Sheet的特定字段统计、数据清洗、交叉分析与可视化,最终生成带下载链接的汇总报告。 | source |
excel-multi-sheet-threshold-analysis |
core | 统计多Sheet Excel总行数并根据规模选择处理策略,提取特定维度信息进行去重统计,并生成摘要与明细报表。 | source |
excel-smart-analysis-and-cleaning |
core | 对多 Sheet Excel 进行智能清洗、跨表核对与可视化分析。。 | source |
excel-threshold-analysis-and-styling |
core | 根据 Excel 数据量级自动判断处理策略,执行数值列清洗、条件过滤,并使用 openpyxl 对符合条件的单元格进行样式标记与导出。 | source |
group-by-analysis |
core | 对多 Sheet 的 Excel 文件进行行数统计、大文件 Parquet 转换预处理、数据清洗及分组聚合分析,并生成带样式标记的统计表与可视化图表。 | source |
Source: rampstackco/claude-skills
- Repository: https://github.com/rampstackco/claude-skills (commit
bc6d961, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
data-warehouse-experimentation |
core | Running experiments out of the data warehouse instead of via dedicated experiment platforms. SQL-based assignment, exposure logging discipline, metric definitions in dbt models, statistical analysis in SQL or Python, variance reduction … | source |
Source: sanjay3290/ai-skills
- Repository: https://github.com/sanjay3290/ai-skills (commit
3619692, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
deep-research |
core | Execute autonomous multi-step research using Google Gemini Deep Research Agent. Use for: market analysis, competitive landscaping, literature reviews, technical research, due diligence. Takes 2-10 minutes but produces detailed, cited … | source |
Source: snyk/agent-scan
- Repository: https://github.com/snyk/agent-scan (commit
f3a4621, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
core | Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … | source |
Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
- Repository: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance (commit
71d8920, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
cis-controls |
core | Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, … | source |
ism |
core | Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD … | source |
nzism |
core | Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap analysis, agency security obligations, classification framework (Unclassified through … | source |
Source: ThinkInAIXYZ/deepchat
- Repository: https://github.com/ThinkInAIXYZ/deepchat (commit
f275c92, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
core | Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … | source |
Source: wanshuiyin/Auto-claude-code-research-in-sleep
- Repository: https://github.com/wanshuiyin/Auto-claude-code-research-in-sleep (commit
eb5c9d7, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
system-profile |
core | Profile a target (script, process, GPU, memory, interconnect) for performance analysis. Use when user says "profile", "benchmark", "bottleneck", or wants performance analysis. | source |