{"slug":"mukul975-managing-third-party-vendor-risk","source_name":"mukul975/managing-third-party-vendor-risk","name":"Mukul975/Managing Third Party Vendor Risk","description":"Build and run a third-party / vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM and NIST CSF 2.0 GV.SC: inventory and tier vendors by risk, send the right due-diligence questionnaire (SIG, CAIQ), review evidence (SOC 2, ISO 27001, pen-test reports), set contractual security and right-to-audit clauses, monitor vendors continuously, manage Nth-party / subcontractor risk, and offboard securely. Use when an organization needs to assess a new vendor before onboarding, when stand","version":1,"lift":{"pass_rate_delta_pts":8.7,"pass_rate_pct":91.3,"total_cases":23,"passed_cases":21,"tokens_delta_pct":94.3,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-03T20:02:32.061268+00:00"},"skill_score":0.913,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":8.7,"with_pass_pct":91.3,"without_pass_pct":82.6,"tokens_delta_pct":94.3,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-03T20:02:32.061268+00:00","run_id":"e45ec821-5d79-4c36-8e04-4ee26caad4f7","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"5467377bf407ac5537d26613aac79bb3fe974048e6fc9a137664c5f70ddfdd0f","raw_url":"https://app.decimal.ai/s/mukul975-managing-third-party-vendor-risk/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/mukul975-managing-third-party-vendor-risk"}