skills-core/purchasing-manager
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
main
purchasing-manager/references/ai-skills.md
skillfactor-pipeline 702a41dd6a feat: purchasing-manager skill package v0.1.0
2026-08-14 16:31:15 +02:00

36 KiB
Raw Permalink Blame History

External AI agent skills — purchasing-manager

Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.

Tiers: core = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; adjacent = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package.

Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by pipeline/p5_enrich_ai_skills.py on 2026-07-14.

Source: anthropics/skills

  • Repository: https://github.com/anthropics/skills (commit f6656c1, retrieved 2026-07-14)
  • License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
Skill Tier What it adds Upstream
docx adjacent Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … source
pdf adjacent Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … source

Source: wshobson/agents

Skill Tier What it adds Upstream
team-collaboration-dx-optimizer (agent) adjacent Developer Experience specialist. Improves tooling, setup, and workflows. Use PROACTIVELY when setting up new projects, after team feedback, or when development friction is noticed. source

Source: a5c-ai/babysitter

Skill Tier What it adds Upstream
cost-to-serve-analyzer core Supply chain cost-to-serve analysis skill by customer, product, or channel source
early-warning-monitor core Continuous supplier and supply chain risk monitoring with automated alerts source
master-data-quality-manager core Supply chain master data quality monitoring and improvement skill source
inventory-optimizer core Inventory management optimization skill with safety stock calculation, reorder point determination, and ABC analysis source
supply-chain-risk-assessor core Comprehensive supply chain risk identification and assessment skill with heat mapping source
supply-chain-visibility-integrator core End-to-end supply chain visibility integration skill connecting systems and data sources source
disruption-response-coordinator core Supply chain disruption rapid response skill with impact assessment and mitigation activation source
supply-chain-visibility-platform core End-to-end supply chain visibility skill providing real-time tracking and control tower capabilities source
contingency-plan-builder core Business continuity and contingency plan development skill for supply chain resilience source
fifo-lifo-controller core Automated inventory rotation management skill ensuring proper product flow based on expiration, production, or receipt dates source
tco-calculator core Total Cost of Ownership calculation skill for comprehensive supplier and sourcing decision analysis source
scor-kpi-dashboard-builder core SCOR-aligned supply chain KPI dashboard design and implementation skill source

Source: affaan-m/everything-claude-code

Skill Tier What it adds Upstream
quality-nonconformance core Codified expertise for quality control, non-conformance investigation, root cause analysis, corrective action, and supplier quality management in regulated manufacturing. Informed by quality engineers with 15+ years experience across FDA, … source
energy-procurement core 電気とガス調達、料金最適化、需要料金管理、再生可能エネルギーPPA評価、およびマルチファシリティーエネルギー戦略のための符号化された専門知識。 Codified expertise for electricity and gas procurement, tariff optimization, demand charge management, renewable PPA evaluation, and multi-facility energy cost … source
agentic-os core Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. source
inventory-demand-planning core 在庫管理、需要予測、補充戦略、およびサプライチェーン最適化。 Codified expertise for demand forecasting, safety stock optimization, replenishment planning, and promotional lift estimation at multi-location retailers. Informed by demand planners with 15+ years experience … source

Source: alirezarezvani/claude-skills

Skill Tier What it adds Upstream
process-mapper core Use when a BizOps lead, COO, or process-improvement owner needs to document an end-to-end business process (procurement, employee onboarding, incident handoff, customer-onboarding, claims adjudication) in BPMN-style notation, measure cycle … source
business-operations-skills core Use when running, diagnosing, or designing internal business operations — process documentation, vendor SLAs, capacity planning, internal comms, SOP/runbook authoring, procurement spend. Triggers on "BizOps review", "where's the … source

Source: avelikiy/great_cto

Skill Tier What it adds Upstream
vertical-logistics core Domain knowledge for the logistics & supply-chain vertical (SMB shipping & inventory) so architect and pm don't spec naively. Covers the vocabulary (TMS vs WMS, multi-carrier rate shopping, dimensional weight, BOL/ASN, lot/batch, reorder … source

Source: backnotprop/plannotator

Skill Tier What it adds Upstream
review-renovate core Review Renovate bot PRs that update GitHub Actions dependencies. Verifies supply chain integrity by checking pinned commit SHAs against upstream tagged releases, reviews changelogs for breaking changes, and confirms compatibility with … source
update-deps core Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping. Defers risky packages to ~/.supply-chain/notes/. source

Source: davila7/claude-code-templates

Skill Tier What it adds Upstream
vulnerability-scanner core Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization. source
supply-chain-guard core Detect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations. source
benchling-integration core Benchling R&D platform integration. Access registry (DNA, proteins), inventory, ELN entries, workflows via API, build Benchling Apps, query Data Warehouse, for lab data management automation. source
code-review-excellence core Transform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and collaborative improvement. source

Source: hypnguyen1209/offensive-claude

Skill Tier What it adds Upstream
vulnerability-analysis core Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks source
cicd-supply-chain core Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance source

Source: jeremylongshore/claude-code-plugins-plus-skills

Skill Tier What it adds Upstream
flexport-data-handling core Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … source
flexport-reference-architecture core Implement Flexport reference architecture for supply chain integrations with best-practice project layout, service boundaries, and data flow. Trigger: "flexport architecture", "flexport project structure", "flexport system design". source
volt-recon core Firmware reconnaissance for takeover — inventory the MCU, peripherals, RTOS, protocols, OTA, power management, and assess code quality with risk flags. Use when asked to "understand this firmware", "device inventory", or "embedded … source
apify-cost-tuning core Optimize Apify platform costs through memory tuning, compute unit management, and proxy budgeting. Use when analyzing Apify billing, reducing Actor run costs, or implementing usage monitoring and budget alerts. Trigger: "apify cost", … source
flexport-incident-runbook core Execute Flexport incident response for API outages, webhook failures, and supply chain data sync issues with triage and mitigation steps. Trigger: "flexport incident", "flexport outage", "flexport down", "flexport emergency". source
warden-recon core Security reconnaissance — full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps. Use when asked about "security posture", "how secure is this", or "security assessment". source
webflow-core-workflow-b core Execute Webflow secondary workflows \u2014 Sites management, Pages API,\ \ Forms submissions,\nEcommerce (products/orders/inventory), and Custom Code via\ \ the Data API v2.\nUse when managing sites, reading pages, handling form data,\ \ … source
flexport-deploy-integration core Deploy Flexport logistics integrations to Vercel, Fly.io, and Cloud Run. Use when deploying shipment tracking dashboards, webhook receivers, or supply chain automation services to production infrastructure. Trigger: "deploy flexport", … source
flexport-prod-checklist core Execute Flexport production deployment checklist for logistics integrations. Use when deploying shipment tracking, booking automation, or supply chain integrations to production with proper monitoring and rollback. Trigger: "flexport … source
warden core Security engineer — IAM, secrets, threat modeling, hardening, auth, and supply chain security. source
flexport-migration-deep-dive core Execute major migration strategies for Flexport including migrating from legacy freight forwarders, ERP system integration, and strangler fig patterns. Trigger: "flexport migration", "migrate to flexport", "flexport ERP integration". source
pave-recon core Platform reconnaissance — inventory all developer tooling, environments, build systems, and developer workflows for project takeover. Use when asked to "understand the dev setup", "developer tooling assessment", "platform assessment", or … source

Source: microsoft/power-platform-skills

Skill Tier What it adds Upstream
manage-flows core Manage flow lifecycle - publish, test, batch operations, inventory reports. Use when the user asks to publish, test, batch manage, or get an inventory of flows. source

Source: microsoft/skills

Skill Tier What it adds Upstream
azure-mgmt-apicenter-dotnet core Azure API Center SDK for .NET. Centralized API inventory management with governance, versioning, and discovery. Use for creating API services, workspaces, APIs, versions, definitions, environments, deployments, and metadata schemas. … source
azure-mgmt-apicenter-py core Azure API Center Management SDK for Python. Use for managing API inventory, metadata, and governance across your organization. Triggers: "azure-mgmt-apicenter", "ApiCenterMgmtClient", "API Center", "API inventory", "API governance". source

Source: mohitagw15856/pm-claude-skills

Skill Tier What it adds Upstream
logistics-incident-report core Write up a supply chain disruption — port delay, carrier failure, customs hold, or in-transit damage — as a decision-ready incident report. Use when asked to document a shipment delay, write up a logistics failure, report a customs hold, … source
vendor-evaluation core Create a structured vendor evaluation framework for any procurement decision. Use when asked to evaluate vendors, compare suppliers, run an RFP scoring process, or assess a software or service provider. Produces a weighted scorecard, … source
rfp-scoring-matrix core Build a weighted RFP evaluation matrix and defensible award recommendation. Use when asked to score RFP responses, compare vendor bids, build a supplier evaluation matrix, run a sourcing event scorecard, or decide which bidder to award. … source
win-loss-analysis core Analyze why deals are won and lost and turn it into an action plan. Use when asked to run a win/loss analysis, review closed-won and closed-lost deals, understand why the team is losing to a competitor, or summarize sales feedback into … source

Source: mukul975/Anthropic-Cybersecurity-Skills

Skill Tier What it adds Upstream
analyzing-sbom-for-supply-chain-vulnerabilities core Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk … source
analyzing-macro-malware-in-office-documents core Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … source
managing-third-party-vendor-risk core Build and run a third-party / vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM and NIST CSF 2.0 GV.SC: inventory and tier vendors by risk, send the right due-diligence questionnaire (SIG, CAIQ), review evidence (SOC … source
analyzing-supply-chain-malware-artifacts core Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise. source
verifying-build-provenance-with-slsa-sigstore core Verify signed artifacts and SLSA build provenance with Sigstore cosign and slsa-verifier, enforce keyless OIDC identity, and apply SLSA Build levels to harden the software supply chain. source
hunting-for-supply-chain-compromise core Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. source
implementing-code-signing-for-artifacts core This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific … source
implementing-supply-chain-security-with-in-toto core Implement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps. source
performing-supply-chain-attack-simulation core Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning … source
detecting-supply-chain-attacks-in-ci-cd core Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for … source
securing-github-actions-workflows core This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets from … source
performing-api-inventory-and-discovery core Performs API inventory and discovery to identify all API endpoints in an organization''s environment including documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning, DNS … source

Source: nexscope-ai/eCommerce-Skills

Skill Tier What it adds Upstream
supply-chain-optimization-tiktok core Supply Chain Bottleneck Analyzer for TikTok Shop sellers. Diagnose cash flow, inventory turnover, affiliate commissions, and return rates. Includes FBT cost analysis, influencer payout optimization, and viral product lifecycle management. … source
supply-chain-optimization-shopify core Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV analysis, 3PL cost optimization, and ad spend benchmarks. No API key required for … source
supply-chain-optimization-walmart core Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers. Diagnose cash flow, inventory, WFS costs, and referral fees. Includes comparison with Amazon FBA, lower storage fee optimization, and Walmart Connect ad spend analysis. No … source
supply-chain-optimization-amazon-lite core Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation source
shopify-inventory-management core Multi-location inventory — transfers, low stock alerts, demand forecasting, safety stock, ABC analysis source
ecommerce-returns-management core Optimize e-commerce returns process and reduce return rates. Returns policy design, reverse logistics, root cause analysis, and customer retention through better returns experience. source
tiktok-shop-inventory core Inventory management for TikTok Shop — demand forecasting, viral stock planning, FBT optimization source
warehouse-optimization core E-commerce warehouse and inventory optimization advisor. Analyzes inventory health, calculates safety stock and reorder points, performs ABC analysis, evaluates fulfillment costs, and provides actionable recommendations for improving … source
dropshipping-product-research core Product research for dropshipping businesses. Identify profitable products with reliable suppliers, healthy margins, and manageable competition. Evaluates shipping times, return risk, and marketing viability. source

Source: nexu-io/open-design

Skill Tier What it adds Upstream
huashu-takram-soft-tech core Open Design procurement & security leave-behind: the one-pager-plus a buying committee can forward and approve internally. Built as a decision-grade B2B sales deck for buying committee, security, procurement. source

Source: rampstackco/claude-skills

Skill Tier What it adds Upstream
data-warehouse-experimentation core Running experiments out of the data warehouse instead of via dedicated experiment platforms. SQL-based assignment, exposure logging discipline, metric definitions in dbt models, statistical analysis in SQL or Python, variance reduction … source

Source: sanjay3290/ai-skills

Skill Tier What it adds Upstream
deep-research core Execute autonomous multi-step research using Google Gemini Deep Research Agent. Use for: market analysis, competitive landscaping, literature reviews, technical research, due diligence. Takes 2-10 minutes but produces detailed, cited … source

Source: secondsky/claude-skills

Skill Tier What it adds Upstream
dependency-upgrade core Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks. source

Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Tier What it adds Upstream
ism core Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD … source
cis-controls core Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, … source
nzism core Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap analysis, agency security obligations, classification framework (Unclassified through … source

Source: trailofbits/skills

Skill Tier What it adds Upstream
supply-chain-risk-auditor core Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements. source

Source: wanshuiyin/Auto-claude-code-research-in-sleep

Skill Tier What it adds Upstream
system-profile core Profile a target (script, process, GPU, memory, interconnect) for performance analysis. Use when user says "profile", "benchmark", "bottleneck", or wants performance analysis. source

Source: zebbern/claude-code-guide

Skill Tier What it adds Upstream
regression-modeler core Run regression analysis (OLS or logistic) on uploaded CSV/Excel data, generating coefficients, R², p-values, VIF, and plain-language interpretation. Triggered by requests for regression modeling, fitting data, testing significance, … source