feat: add Vendor Risk Assessment Agent kit

kits/vendor-risk-assessment-agent/.gitignore

@@ -0,0 +1,4 @@
+.lamatic/
+node_modules/
+.env
+.env.local

kits/vendor-risk-assessment-agent/README.md

@@ -0,0 +1,308 @@
+# 🛡️ Vendor Risk Assessment Agent (AgentKit)
+
+<p align="center">
+
+![React](https://img.shields.io/badge/React-19-blue?logo=react)
+![TypeScript](https://img.shields.io/badge/TypeScript-5-blue?logo=typescript)
+![Vite](https://img.shields.io/badge/Vite-Frontend-purple?logo=vite)
+![Lamatic](https://img.shields.io/badge/Lamatic-AgentKit-success)
+![OpenAI](https://img.shields.io/badge/OpenAI-GPT--4o--mini-black)
+
+</p>
+
+---
+
+# AgentKit Overview
+
+This AgentKit provides an enterprise-ready multi-agent workflow for third-party vendor due diligence.
+
+The kit contains:
+
+- Lamatic workflow definitions
+- Prompt templates
+- Model configurations
+- Constitutions
+- React dashboard for interacting with the workflow
+
+The workflow consists of three AI agents:
+
+1. Vendor Information Extraction
+2. Vendor Risk Assessment
+3. Recommendation Generation
+
+The application transforms unstructured vendor questionnaires into structured vendor information, evaluates enterprise risk across multiple domains, and generates actionable business recommendations using a multi-agent AI workflow.
+
+Designed for enterprise Third-Party Risk Management (TPRM), this project demonstrates how multiple AI agents can collaborate while maintaining structured, explainable outputs.
+
+---
+
+# 🚀 Demo
+
+### 🌐 Live Application
+
+https://vendor-risk-assessment-agent.vercel.app/
+
+### GitHub Repository
+
+https://github.com/Rishabh150102/vendor-risk-assessment-agent
+
+---
+
+# ✨ Features
+
+- 🤖 Multi-Agent workflow powered by Lamatic AgentKit
+- 📄 Intelligent extraction of vendor information
+- 🔒 Security Risk Assessment
+- 📋 Compliance Risk Assessment
+- 💰 Financial Risk Assessment
+- ⚙️ Operational Risk Assessment
+- ⚖️ Legal Risk Assessment
+- 📈 Overall Vendor Risk Score
+- 💡 AI-generated enterprise recommendations
+- 🎨 Modern responsive dashboard
+- ⚡ Real-time analysis
+- 🧩 Structured JSON outputs from every agent
+
+---
+
+# 🏗️ Architecture
+
+```mermaid
+flowchart TD
+
+A[Vendor Information Input]
+    --> B[Vendor Information Extraction Agent]
+
+B --> C[Structured Vendor Information]
+
+C --> D[Vendor Risk Assessment Agent]
+
+D --> E[Structured Risk Assessment]
+
+E --> F[Vendor Risk Recommendation Agent]
+
+F --> G[Final Assessment Result]
+
+G --> H[React Dashboard]
+
+H --> I[Vendor Information]
+
+H --> J[Risk Assessment]
+
+H --> K[Recommendations]
+```
+
+---
+
+# 🤖 AI Workflow
+
+## Agent 1 — Vendor Information Extraction
+
+Extracts structured vendor information including:
+
+- Vendor Details
+- Security Controls
+- Compliance Information
+- Financial Information
+- Operational Information
+- Legal Information
+
+---
+
+## Agent 2 — Vendor Risk Assessment
+
+Evaluates:
+
+- Security Risk
+- Compliance Risk
+- Financial Risk
+- Operational Risk
+- Legal Risk
+
+Generates:
+
+- Overall Risk Score
+- Risk Categories
+- Supporting Evidence
+- Assessment Reasoning
+
+---
+
+## Agent 3 — Recommendation Agent
+
+Generates:
+
+- Executive Summary
+- Positive Findings
+- Priority Actions
+- Recommendations
+- Next Steps
+
+---
+
+# 🔄 How It Works
+
+1. User enters vendor information.
+2. Vendor Information Extraction Agent converts the input into structured JSON.
+3. Vendor Risk Assessment Agent evaluates the vendor across Security, Compliance, Financial, Operational and Legal domains.
+4. Recommendation Agent generates business-focused recommendations.
+5. React dashboard displays the complete assessment.
+
+---
+
+# 🛠️ Tech Stack
+
+## Frontend
+
+- React 19
+- TypeScript
+- Vite
+- Tailwind CSS
+
+## AI & Orchestration
+
+- Lamatic AgentKit
+- OpenAI GPT-4o-mini
+
+## Deployment
+
+- Vercel
+
+## Version Control
+
+- Git
+- GitHub
+
+---
+
+# ⚙️ Installation
+
+Clone the AgentKit repository and navigate to the Vendor Risk Assessment Agent application.
+
+```bash
+git clone https://github.com/Rishabh150102/Lamatic-AgentKit.git
+
+cd Lamatic-AgentKit/kits/vendor-risk-assessment-agent/apps
+
+npm install
+
+npm run dev
+```
+
+---
+
+# 🔑 Environment Variables
+
+Create a `.env` file inside the `apps/` directory.
+
+```env
+VITE_LAMATIC_PROJECT_ENDPOINT=
+
+VITE_LAMATIC_PROJECT_ID=
+
+VITE_LAMATIC_PROJECT_API_KEY=
+
+VITE_LAMATIC_FLOW_ID=
+```
+
+---
+
+# 📂 AgentKit Structure
+
+```text
+vendor-risk-assessment-agent/
+├── apps/
+├── flows/
+├── prompts/
+├── model-configs/
+├── constitutions/
+├── lamatic.config.ts
+├── agent.md
+└── README.md
+```
+
+---
+
+# 📂 Application Structure
+
+```text
+apps/
+├── src/
+│   ├── components/
+│   ├── data/
+│   ├── App.tsx
+│   ├── main.tsx
+│   ├── types.ts
+│   └── utils.ts
+├── assets/
+├── screenshot/
+├── package.json
+├── vite.config.ts
+└── tsconfig.json
+```
+
+---
+
+# 📸 Screenshots
+
+## Home
+
+![Home](apps/screenshot/1-home.png)
+
+## Vendor Information
+
+![Vendor](apps/screenshot/2-vendor.png)
+
+## Risk Assessment
+
+![Risk](apps/screenshot/3-risk.png)
+
+## Recommendations
+
+![Recommendations](apps/screenshot/4-recomm.png)
+
+---
+
+# 📝 Example Input
+
+```text
+Vendor Name: Acme Corporation
+
+SOC 2 Type II
+ISO 27001
+
+AES-256
+TLS 1.3
+
+RBAC
+MFA
+
+99.99% uptime
+
+GDPR Compliant
+```
+
+---
+
+# 🚀 Future Improvements
+
+- PDF Upload Support
+- DOCX Upload Support
+- Assessment History
+- Export Report as PDF
+- Authentication
+- Vendor Comparison
+
+---
+
+# 🤝 Contributing
+
+Contributions, issues, and feature requests are welcome.
+
+Please fork the repository and submit a Pull Request.
+
+---
+
+# 📄 License
+
+This project is submitted as part of the Lamatic AgentKit contribution and follows the licensing terms of the AgentKit repository.

kits/vendor-risk-assessment-agent/agent.md

@@ -0,0 +1,32 @@
+# Vendor Risk Assessment Agent
+
+## Overview
+
+This AgentKit provides an AI-powered workflow for enterprise third-party vendor due diligence.
+
+It consists of three coordinated agents:
+
+1. Vendor Information Extraction
+2. Vendor Risk Assessment
+3. Risk Recommendation Generation
+
+The workflow transforms unstructured vendor questionnaires into structured vendor profiles, evaluates security, compliance, financial, operational, and legal risks, and produces actionable recommendations.
+
+## Inputs
+
+- Vendor questionnaire
+- Security documentation
+- Compliance information
+
+## Outputs
+
+- Structured vendor profile
+- Risk assessment
+- Executive recommendations
+
+## Guardrails
+
+- Never invent vendor information.
+- Base assessments only on extracted evidence.
+- Recommendations must be supported by the assessment.
+- Return structured JSON at every stage.

kits/vendor-risk-assessment-agent/apps/.env.example

@@ -0,0 +1,15 @@
+# GEMINI_API_KEY: Required for Gemini AI API calls.
+# AI Studio automatically injects this at runtime from user secrets.
+# Users configure this via the Secrets panel in the AI Studio UI.
+GEMINI_API_KEY="MY_GEMINI_API_KEY"
+
+# APP_URL: The URL where this applet is hosted.
+# AI Studio automatically injects this at runtime with the Cloud Run service URL.
+# Used for self-referential links, OAuth callbacks, and API endpoints.
+APP_URL="MY_APP_URL"
+
+# Lamatic AI Flow Configuration
+VITE_LAMATIC_PROJECT_ENDPOINT="https://your-project.lamatic.ai"
+VITE_LAMATIC_PROJECT_ID="your-project-id"
+VITE_LAMATIC_PROJECT_API_KEY="your-api-key"
+VITE_LAMATIC_FLOW_ID="your-flow-id"