Firm Suppliers Pack

Procurement and supplier management pack. Supplier sourcing, multi-criteria evaluation, TCO analysis, contract management, and supply chain risk monitoring....

Security Scan

The skill's declared purpose (procurement and supplier management) aligns with its instructions and it requests no unusual credentials or installs, but it is instruction-only with no provenance — validate the required extension and outputs before relying on it.

Purpose & Capability

The name, description, and the five tool names all map to procurement/supplier-management tasks. The only declared dependency is mcp-openclaw-extensions >= 3.2.0, which is plausible for providing helper primitives; there are no unrelated environment variables, binaries, or config paths requested.

Instruction Scope

SKILL.md contains high-level, scoped instructions and example invocations for supplier search, evaluation, TCO, contract checks, and risk monitoring. It does not instruct the agent to read local files, environment variables, or transmit data to unexpected endpoints. However, the file is marked as 'IA-generated — human validation required' and provides no implementation — the actual behavior will depend entirely on the mcp-openclaw-extensions and the platform's skill runtime, so verify what that extension does (network calls, data retention, third-party APIs).

Install Mechanism

No install spec and no code files — instruction-only. This minimizes file-write and install risks because nothing is downloaded or executed by the skill itself.

Credentials

The skill requests no environment variables, credentials, or config paths. This is proportionate to the stated purpose for a guidance/analysis pack. If integrations with vendor APIs are later added, those should require explicit, minimal credentials.

Persistence & Privilege

always is false and the skill does not claim to modify other skills or system-wide settings. The 'risk_monitor' tool suggests continuous monitoring, but there is no install or persistent agent component declared — verify how monitoring is implemented by the platform/extension before granting long-lived access.

Assessment

This skill appears internally consistent with procurement tasks and asks for nothing sensitive, but it's instruction-only and lacks provenance. Before using it: (1) verify the source and trustworthiness of the required mcp-openclaw-extensions (what network calls and data retention does it perform?); (2) perform human review of any generated procurement documents (SKILL.md itself warns this); (3) test the skill in a limited environment to confirm it doesn't request or access organization credentials or systems; and (4) if you plan to enable 'risk monitoring', confirm how the platform implements watches/alerts and what permissions (if any) it will need. If you cannot confirm the extension's behavior or the skill's provenance, treat outputs as advisory only and avoid connecting sensitive systems or secrets.

⚠️ Contenu généré par IA — validation humaine requise avant utilisation.

Purpose

Provides a complete procurement and supplier management toolkit for the firm. Enables structured supplier sourcing (SaaS, services, industrial), multi-criteria evaluation with scoring matrices, total cost of ownership analysis, contract clause recommendations, and continuous supply chain risk monitoring.

Designed to produce professional documents readable by every department: CEO (strategic sourcing decisions), CFO (procurement budget and TCO), CTO (tech vendor selection), Legal (contract clauses), Operations (delivery and logistics).

Tools (5)

Tool	Description	Category
openclaw_supplier_search	Market-wide supplier sourcing — identification, filtering, shortlisting	procurement
openclaw_supplier_evaluate	Multi-criteria supplier evaluation with 15+ weighted criteria scoring	procurement
openclaw_supplier_tco_analyze	Total Cost of Ownership analysis over 3-5 years including hidden costs	finance
openclaw_supplier_contract_check	Contract clause analysis — SLA, penalties, reversibility, compliance	legal
openclaw_supplier_risk_monitor	Continuous supplier risk monitoring — financial, dependency, geopolitical	procurement

Usage

skills:
  - firm-suppliers-pack

# Search for SaaS project management tools:
openclaw_supplier_search category="SaaS project management" budget_max=1000 users=50

# Evaluate shortlisted suppliers:
openclaw_supplier_evaluate suppliers='["Monday.com","ClickUp","Notion"]' criteria='{"price":20,"features":25,"support":15}'

# TCO analysis:
openclaw_supplier_tco_analyze suppliers='["Monday.com","ClickUp"]' volume=50 horizon_years=3

# Contract clause check:
openclaw_supplier_contract_check supplier="ClickUp" contract_type="SaaS" requirements='["SLA 99.9%","RGPD DPA","reversibility"]'

# Risk monitoring:
openclaw_supplier_risk_monitor action="add" supplier="ClickUp" watch='["financial","service_level","security"]'

Cross-Department Integration

Department	What they get	Tool
CEO	Strategic sourcing recommendations	supplier_evaluate
CFO	TCO analysis, budget projections	supplier_tco_analyze
CTO	Tech vendor evaluation and comparison	supplier_search + supplier_evaluate
Legal	Contract clause recommendations	supplier_contract_check
Operations	Supply chain risk alerts	supplier_risk_monitor

Requirements

• mcp-openclaw-extensions >= 3.2.0