Skills with Bundled Scripts

One skill covering every document format the category exists for — including scanned PDFs and RAG chunking — from the maintainers of the parser itself.

Write HTML, render video. Agent-native, deterministic, no build step.

Structured multi-step development. Brainstorm → spec → plan → build → review → merge — TDD baked in.

Microsoft's first-party Playwright skill, invoked through the CLI — the reference implementation for driving a real browser, with no credentials required.

Diagrams generated from live infrastructure rather than from a prompt — it reads the actual resource group and draws what is really there.

Local browser with no credentials, or a hosted Browserbase session with CAPTCHA solving and residential proxies when the target is protected.

Diff-aware adversarial QA: it reads the git diff and tests only what changed, across correctness, accessibility, layout and UX.

The marketplace architecture decision, made with a compatibility matrix that blocks invalid Connect configurations instead of describing them.

Multimodal extraction across documents, images, audio and video through one Azure client — Microsoft-authored, with an explicit trigger list.

Batch document translation that preserves layout — the part that breaks when you translate a PDF by extracting text and re-flowing it.

Vendor-official voiceover generation across 70+ languages, from the company that defined the category. Ships with evals, which almost no skill does.

Transcription and subtitle generation as a first-class skill — the media job agents are asked for most and could not previously do well.

Localise video while keeping the original speaker's voice — and correct the transcript before regenerating, rather than accepting the first pass.

The generalist Postgres skill the ecosystem was missing — schema, indexing, extensions and migrations, from a Postgres company.

Zero-downtime Postgres migrations, with the locking behaviour spelled out — which ALTER TABLE takes an AccessExclusiveLock and what to do instead.

Local document extraction with no API key — read the file, not the whole file.

Extract, fill, merge. PDF manipulation with bundled scripts so Claude does not waste tokens generating them.

Slack's own Block Kit skill — and the rare vendor skill that needs no token, because it validates against Slack's public API.

Test local webapps with Playwright. Generation, run, report — end-to-end.

Semgrep's own scanning skill: run the industry-standard SAST engine across 30+ languages, and author custom rules for your codebase's patterns.

A vendor-maintained rule corpus for secure code review — one reference file per vulnerability class, from SQL injection to Terraform misconfiguration.

GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits.

The SQLite slot, filled by Turso — and unusually, a skill that actively steers the agent off the stale API surface web search returns.

Security audits run by a real security firm. CodeQL + Semgrep + audit workflows.

OWASP-published review, SCA, secrets and threat-modelling skills — the most citable provenance available for security review vocabulary.

The vector-database skill that ships executable scripts rather than prose — the agent runs the query instead of describing it.

The multi-channel notification slot nothing else covers: push, in-app and chat alongside email, with copy guidance per channel. No credentials required.

Word documents end-to-end. Create, edit, comment, track-change.

Excel spreadsheets with real formulas, charts, and formatting — not flat CSV exports.

PowerPoint decks with layouts, charts, speaker notes — programmatic from prose.

Actually renders Mermaid to SVG or ASCII instead of emitting text and hoping something downstream draws it. Bundles the render scripts.

The widest format matrix of any conversion skill we catalogue, and it executes the conversion rather than describing it.

The heavyweight audit machine: 88 evidence scripts so SEO findings come from data, not vibes.