vendor-check

Inventory vendor legal paperwork and analyze gaps across MSA, DPA, NDA, SOW, BAA, COI, SOC 2, and pen-test attestation.

Updated Apr 25, 2026
One-click install
npx skills add https://github.com/nmoralescyber/claude-skill-optimization --skill vendor-check-nmoralescyber
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vendor-check
Source: https://github.com/nmoralescyber/claude-skill-optimization/tree/main/skills/legal/vendor-check
Command: npx skills add https://github.com/nmoralescyber/claude-skill-optimization --skill vendor-check-nmoralescyber

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Consolidates and tracks vendor legal paperwork across MSAs, DPAs, NDAs, SOWs, COIs, SOC 2, pen-tests, and related records to expose gaps and monitor expiration.

Core Features & Use Cases

  • Inventory and status of key documents per vendor (MSA, DPA, NDA, SOW, BAA, COI, SOC 2, pen-test attestation, etc.)
  • Gap analysis and risk flags to prioritize mitigations for onboarding, renewal, or audits
  • Surviving obligations register and termination action templates to manage post-termination duties

Quick Start

Audit a vendor's paperwork by running a full inventory and gap analysis to identify missing items and upcoming expirations.

Frequently Asked Questions about vendor-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I track vendor legal documents and identify compliance gaps?

Manage vendor compliance by centralizing key documents like SOC 2 reports, COIs, and pen-test attestations into a structured inventory. This provides a consolidated view for legal, procurement, security, and finance stakeholders to monitor obligations.

How do I inventory vendor contracts and monitor expiration dates?

Monitor vendor paperwork expirations by maintaining a versioned record of contracts and security attestations. The system applies structured tracking to flag upcoming deadlines and ensure post-termination duties are met.

What is the best way to manage vendor risk assessments and onboarding paperwork?

Manage vendor risk assessments by consolidating paperwork like SOC 2 and pen-test attestations into a single view. This structured output highlights risk flags and missing items, prioritizing mitigations for onboarding decisions.

Can I track surviving obligations after a vendor contract termination?

Track surviving obligations post-termination using built-in action templates and a dedicated register. This ensures post-termination duties are managed with clear ownership and versioned records for legal and finance teams.

Does vendor compliance tracking cover security attestations and certificates of insurance?

Vendor compliance tracking covers security attestations and certificates of insurance by inventorying SOC 2 reports, pen-test attestations, and COIs. It applies gap analysis to prioritize mitigations for audits and renewal decisions.