vendor-check

Inventory vendor legal paperwork and analyze gaps across MSA, DPA, NDA, SOW, BAA, COI, SOC 2, and pen-test attestation.

Updated Apr 25, 2026
One-click install
npx skills add https://github.com/nmoralescyber/claude-skill-optimization --skill vendor-check-nmoralescyber
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vendor-check
Source: https://github.com/nmoralescyber/claude-skill-optimization/tree/main/skills/legal/vendor-check
Command: npx skills add https://github.com/nmoralescyber/claude-skill-optimization --skill vendor-check-nmoralescyber

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Consolidates and tracks vendor legal paperwork across MSAs, DPAs, NDAs, SOWs, COIs, SOC 2, pen-tests, and related records to expose gaps and monitor expiration.

Core Features & Use Cases

  • Inventory and status of key documents per vendor (MSA, DPA, NDA, SOW, BAA, COI, SOC 2, pen-test attestation, etc.)
  • Gap analysis and risk flags to prioritize mitigations for onboarding, renewal, or audits
  • Surviving obligations register and termination action templates to manage post-termination duties

Quick Start

Audit a vendor's paperwork by running a full inventory and gap analysis to identify missing items and upcoming expirations.

Frequently Asked Questions about vendor-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I track vendor legal documents and identify compliance gaps?▼

Manage vendor compliance by centralizing key documents like SOC 2 reports, COIs, and pen-test attestations into a structured inventory. This provides a consolidated view for legal, procurement, security, and finance stakeholders to monitor obligations.

How do I inventory vendor contracts and monitor expiration dates?▼

Monitor vendor paperwork expirations by maintaining a versioned record of contracts and security attestations. The system applies structured tracking to flag upcoming deadlines and ensure post-termination duties are met.

What is the best way to manage vendor risk assessments and onboarding paperwork?▼

Manage vendor risk assessments by consolidating paperwork like SOC 2 and pen-test attestations into a single view. This structured output highlights risk flags and missing items, prioritizing mitigations for onboarding decisions.

Can I track surviving obligations after a vendor contract termination?▼

Track surviving obligations post-termination using built-in action templates and a dedicated register. This ensures post-termination duties are managed with clear ownership and versioned records for legal and finance teams.

Does vendor compliance tracking cover security attestations and certificates of insurance?▼

Vendor compliance tracking covers security attestations and certificates of insurance by inventorying SOC 2 reports, pen-test attestations, and COIs. It applies gap analysis to prioritize mitigations for audits and renewal decisions.