Procurement Operations
v1.0.0Conducts procurement assessments using company data to evaluate maturity, identify cost savings, outline AI automation, and provide a detailed 90-day improve...
⭐ 0· 505·1 current·1 all-time
by@1kalin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, README and SKILL.md consistently describe a procurement assessment agent and the inputs requested (company size, spend, tools, suppliers) are appropriate for that purpose. Note: the skill's source/homepage are missing (owner ID only), so provenance and vendor trust cannot be verified from the package metadata.
Instruction Scope
Runtime instructions are limited to collecting company-provided procurement data and producing a structured report (scores, savings, roadmap). The SKILL.md does not instruct the agent to read local files, environment variables, or to send data to external endpoints aside from optional references in the README.
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing is written to disk or downloaded as part of the skill package.
Credentials
No environment variables, credentials, or config paths are requested or required. The SKILL.md does not ask for secrets or third-party tokens; the requested inputs are business data (spend, vendors) which are proportionate to the stated purpose.
Persistence & Privilege
Skill is not force-included (always:false) and uses normal model invocation. It does not request persistent system privileges or modify other skills/config; autonomous invocation is allowed by platform default but is not combined with other concerning privileges here.
Assessment
This skill appears coherent and low-risk as-is, but consider these practical precautions before using it with real data:
- Do not paste highly sensitive secrets (API keys, full contract text, bank account numbers); the skill doesn’t ask for them but avoid sharing unnecessary confidential items.
- Test first with synthetic or redacted data to confirm outputs match expectations.
- The package lists no homepage and an unknown owner ID — if you plan to use it in production, verify the vendor/source outside the skill bundle (search the owner slug or ask the provider).
- If you later connect the agent to live procurement systems (ERPs, SAP, Ariba), follow least-privilege practices: create scoped service accounts, rotate credentials, and review the exact integration steps before granting access.
- Be aware the README links to external paid 'context packs'; those are separate commercial resources and not part of this skill. Verify any external URLs before sending company data to them.Like a lobster shell, security has layers — review code before you run it.
automationvk9766qq62xp295zgxxzxcgezad81hq6ccost-reductionvk9766qq62xp295zgxxzxcgezad81hq6cfinancevk9766qq62xp295zgxxzxcgezad81hq6clatestvk9766qq62xp295zgxxzxcgezad81hq6cprocurementvk9766qq62xp295zgxxzxcgezad81hq6cspendvk9766qq62xp295zgxxzxcgezad81hq6c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.