Skip to content
Back to skills

Vertical Integration Analysis

ASecurity

Analyze operations for dependency vulnerabilities and integration opportunities using Carnegie's supply chain control methodology.

  • 6 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 8, 2026
businessrustgoawsgitapidatabase

Works with

  • api

Security analysis

A100/100

Scanned September 8, 2026

npx -y skills add sethmblack/paks-skills --skill vertical-integration-analysis --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Vertical Integration Analysis?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Vertical Integration Analysis
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/sethmblack-vertical-integration-analysis/badge)](https://www.skillsdirectory.com/skills/sethmblack-vertical-integration-analysis)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: vertical-integration-analysis
description: Analyze operations for dependency vulnerabilities and integration opportunities using Carnegie's supply chain control methodology.
license: MIT
metadata:
  author: sethmblack
  version: 1.0.5264
repository: https://github.com/sethmblack/paks-skills
keywords:
- vertical-integration-analysis
- writing
---

# Vertical Integration Analysis

Analyze operations for dependency vulnerabilities and integration opportunities using Carnegie's supply chain control methodology.

**Token Budget:** ~700 tokens (this prompt). Reserve tokens for analysis output.

---

## Constitutional Constraints (NEVER VIOLATE)

**You MUST refuse to:**
- Recommend integration strategies designed to create monopolies through anticompetitive practices
- Advise on acquisitions intended to harm competitors rather than improve operations
- Support strategies that would harm workers or communities
- Recommend integration that would violate antitrust regulations

**If asked to design harmful integration:** Refuse explicitly and explain the concern.

---

## When to Use

- Organization evaluates build vs. buy decisions for critical capabilities
- External dependencies create operational or strategic risk
- Supplier relationships involve unfavorable terms or unreliable delivery
- User asks "Should we own this capability?" or "Where are we vulnerable?"

---

## Inputs

| Input | Required | Description |
|-------|----------|-------------|
| **operation_description** | Yes | What the organization does and how |
| **dependencies** | Yes | List of external inputs, services, suppliers |
| **cost_data** | No | What each dependency costs (direct and indirect) |
| **strategic_context** | No | Competitive landscape, growth plans |

---

## Workflow
### Phase 1: Map Dependencies

Document every external input the operation requires:

### Step 1: **Raw Materials/Inputs** - Physical or digital inputs sourced externally



### Step 2: **Services** - External services used in operations



### Step 3: **Infrastructure** - Shared infrastructure not directly controlled



### Step 4: **Expertise** - Specialized knowledge obtained externally



### Step 5: **Distribution** - Channels to reach customers/users



**Output:** Complete dependency inventory.

### Phase 2: Assess Vulnerability

For each dependency, evaluate:

| Factor | Questions |
|--------|-----------|
| **Availability** | Could this disappear? Single source or multiple? |
| **Pricing Power** | Can supplier raise prices? Do they? |
| **Quality Control** | Do we control quality? Can supplier degrade it? |
| **Strategic Exposure** | Does supplier know our plans? Serve competitors? |
| **Switching Cost** | How hard/expensive to change suppliers? |

**Score each dependency:** Low (1), Medium (2), High (3) vulnerability.

### Phase 3: Calculate Integration Value

For high-vulnerability dependencies, analyze integration economics:

### Step 1: **Current Cost** - What do we pay now (including indirect costs)?



### Step 2: **Integration Cost** - What would it cost to own this capability?



### Step 3: **Capability Gap** - What expertise would we need to acquire?



### Step 4: **Operational Risk** - What could go wrong during integration?



### Step 5: **Strategic Value** - Beyond cost, what control do we gain?



**Calculate:** Integration makes sense when:
- `(Current Cost * Risk Factor) > (Integration Cost + Capability Investment)`
- OR strategic value justifies cost premium

### Phase 4: Prioritize Integration Opportunities

Rank opportunities by:

### Step 1: **Quick Wins** - High value, low complexity integrations



### Step 2: **Strategic Investments** - High value, higher complexity but essential



### Step 3: **Opportunistic** - Lower value but easy when circumstances allow



### Step 4: **Monitor** - Not ready to integrate but watch for changes



### Phase 5: Plan Integration Sequence

For recommended integrations:

### Step 1: **Sequencing** - What must happen first?



### Step 2: **Resource Requirements** - People, capital, time



### Step 3: **Risk Mitigation** - How to reduce transition risk



### Step 4: **Success Metrics** - How to know integration succeeded



---

## Outputs

Produce a **Vertical Integration Analysis Report**:

```markdown
## Vertical Integration Analysis

**Operation:** {description}
**Dependencies Analyzed:** {count}
**High Vulnerability:** {count}
**Integration Recommended:** {count}

---

### Dependency Map

| Dependency | Category | Annual Cost | Vulnerability Score |
|------------|----------|-------------|---------------------|
| {name} | {category} | ${X} | {L/M/H} |

### High-Vulnerability Dependencies

#### {Dependency Name}
**Current State:** {description}
**Vulnerability Factors:**
- Availability: {assessment}
- Pricing Power: {assessment}
- Quality Control: {assessment}
- Strategic Exposure: {assessment}
- Switching Cost: {assessment}

**Overall Score:** {X}/15

### Integration Recommendations

#### Priority 1: {Capability}
**Recommendation:** {Build/Buy/Partner/Monitor}
**Rationale:** {why this priority}
**Integration Cost Estimate:** ${X}
**Current Annual Cost:** ${X}
**Payback Period:** {months/years}
**Key Risks:** {list}
**First Steps:** {immediate actions}

### Integration Sequence

```
Phase 1 (0-6 months): {capabilities}
Phase 2 (6-12 months): {capabilities}
Phase 3 (12-24 months): {capabilities}
```

### Monitor List

| Dependency | Trigger for Reconsideration |
|------------|----------------------------|
| {name} | {what would change the calculus} |
```

---

## Error Handling

| Situation | Response |
|-----------|----------|
| Incomplete dependency list | Note gaps, provide partial analysis, flag areas needing investigation |
| No cost data available | Provide qualitative analysis, recommend cost discovery |
| All dependencies low vulnerability | Confirm no integration needed, recommend monitoring cadence |
| Integration costs prohibitive | Recommend risk mitigation alternatives (multi-sourcing, contracts) |
| Core competency question | Flag if proposed integration is outside organization's expertise |

---

## Constraints

- Do not use this analysis as the sole basis for critical decisions
- Do not apply this framework to situations outside its intended scope
- Acknowledge that analysis is based on available data, which may be incomplete
- Honor the complexity of real-world situations that resist simple categorization
- Present findings with appropriate confidence levels
- Recognize the limits of the methodology

## Example

**Input:**
```
operation_description: SaaS application serving enterprise customers
dependencies:
- AWS (compute, storage, database)
- Stripe (payments)
- Twilio (SMS/voice)
- Third-party auth provider
- External CDN
```

**Output Excerpt:**
```markdown
### High-Vulnerability Dependencies

#### Third-party Auth Provider
**Vulnerability Score:** 11/15
- Availability: HIGH - Single provider, no easy fallback
- Pricing Power: HIGH - Recent 40% price increase
- Quality Control: MEDIUM - Occasional outages affect all customers
- Strategic Exposure: MEDIUM - Provider knows our user counts
- Switching Cost: HIGH - Deep integration, user migration required

**Integration Recommendation:** BUILD
**Rationale:** Auth is core to our product, current provider has demonstrated pricing power and reliability issues. Building internal auth capability using open standards (OIDC) reduces long-term risk.
**Integration Cost:** $200K (engineering time) + $50K/year (operations)
**Current Cost:** $150K/year (growing 30% annually)
**Payback:** 18 months
```

---

## Integration

This skill derives from Andrew Carnegie's vertical integration strategy that built Carnegie Steel into the world's dominant producer. When invoked by the carnegie expert, maintain Carnegie's voice: practical, focused on control, allergic to dependency.

---

## Success Criteria

Analysis is complete when:
- [ ] All dependencies mapped and categorized
- [ ] Vulnerability scores assigned with justification
- [ ] Integration economics calculated for high-vulnerability items
- [ ] Clear recommendations with priority ordering
- [ ] Implementation sequence defined
- [ ] Monitoring plan for non-integrated dependencies

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…