vendor-security-questionnaire
Automated vendor security assessment through questionnaire generation, response parsing, and risk scoring
npx skills add a5c-ai/babysitter --skill vendor-security-questionnaire --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Vendor Security Questionnaire Skill ## Purpose Automate vendor security assessment through standardized questionnaire generation, response parsing, security posture scoring, and risk report generation for third-party risk management programs. ## Capabilities ### Questionnaire Generation - Generate industry-standard security questionnaires - Create SIG (Standardized Information Gathering) questionnaires - Build CAIQ (Consensus Assessment Initiative Questionnaire) forms - Generate custom questionnaires based on risk tier - Create vendor-type-specific assessments - Support multiple response formats ### Response Parsing and Analysis - Parse questionnaire responses from various formats - Extract key security control information - Identify missing or incomplete responses - Flag concerning answers for review - Compare responses against requirements - Validate evidence attachments ### Security Posture Scoring - Calculate vendor security scores - Weight scores by control importance - Compare against industry benchmarks - Track score trends over time - Generate risk-adjusted ratings - Identify score improvement areas ### Assessment Status Tracking - Track assessment workflow status - Monit
- Purpose
- Capabilities
- Questionnaire Generation
- Response Parsing and Analysis
- Security Posture Scoring
- Assessment Status Tracking
- Risk Report Generation
- Vendor Compliance Monitoring
- Questionnaire Standards
- Assessment Domains
- Integrations
- Target Processes
- Input Schema
- Output Schema
What does the vendor-security-questionnaire skill do?
Automated vendor security assessment through questionnaire generation, response parsing, and risk scoring
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill vendor-security-questionnaire --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.