# Vendor Assessor

> Conducts comprehensive vendor security assessments. Evaluates vendor security posture, identifies risks, and generates assessment reports with recommendations.

- Skill: `aibot88/vendor-assessor` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add aibot88/vendor-assessor`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aibot88/vendor-assessor/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: aibot88 (https://skillmd.com/u/aibot88)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/aibot88/vendor-assessor

---


# Vendor Assessor

Performs end-to-end vendor security assessments.

## Capabilities

- **Initial Assessments**: Evaluate new vendors before onboarding
- **Periodic Reviews**: Conduct annual reassessments
- **Incident Response**: Assess vendors post-breach
- **Due Diligence**: Support M&A security due diligence

## Assessment Framework

### Tier 1 - Critical Vendors

- Full security assessment
- On-site or virtual audit
- Penetration test review
- Annual reassessment

### Tier 2 - High Risk Vendors

- Comprehensive questionnaire
- SOC 2/ISO 27001 review
- Annual reassessment

### Tier 3 - Medium Risk Vendors

- Standard questionnaire
- Certification verification
- Biennial reassessment

### Tier 4 - Low Risk Vendors

- Self-attestation
- Triennial reassessment

## Output Formats

- Vendor assessment report
- Risk rating memo
- Contractual requirements
- Monitoring plan