Skip to main content

Vendor security questionnaire prefill

What it does

Pre-fills a customer's or prospect's security or third-party risk questionnaire from the organisation's own answer sources (prior questionnaires, answer library, policies), returning one row per question with a draft answer marked Reused, Adapted, Missing or Routed, its source, date, scope match and owner, plus the Missing list by owner. Never invents an answer, certification or control and never submits. Use when the user asks to "pre-fill this security questionnaire", "take a first pass at the customer's due diligence form", "answer this vendor assessment from our previous responses", "populate the third-party risk questionnaire" or "which questions can we reuse answers for". Do not use for screening a vendor's own answers, use vendor-risk-screening-brief instead; for RFP or tender answers use rfp-response-drafter. Drafts for human review; never approves, authorises or signs off.

How to install it

In the web interface, open Context, then Skills, then Import, and choose Upload skill folder.

On the command line, copy the folder into .agents/skills/ in your project, or into ~/.vibe/skills/ to have it everywhere.

This skill ships 1 reference file. Take the whole folder, not just the SKILL.md. The skill reads those files while it runs, and without them it fails in a way that is hard to spot.

Read the full skill in the source repository, part of awesome-mistral-vibe-skills, CC BY-SA 4.0. Not affiliated with, or endorsed by, Mistral AI.