Skills Without Bundled Scripts

Escape generic AI-generated UIs. Forces a bold, distinctive design direction before any code is written.

One skill covering every document format the category exists for — including scanned PDFs and RAG chunking — from the maintainers of the parser itself.

Resend's deliverability playbook: SPF/DKIM/DMARC, spam avoidance, bounce handling, and CAN-SPAM/GDPR/CASL compliance.

Build cross-client HTML emails as React components, with a visual editor and Resend-ready rendering.

Firebase-authored. Init, configure, and one-step deploy to Firebase Hosting / App Hosting.

Microsoft's first-party Playwright skill, invoked through the CLI — the reference implementation for driving a real browser, with no credentials required.

Stripe's own integration playbook: pick the right API, set up Connect and billing, and handle keys and webhooks securely.

Provision a Postgres, Redis, auth, or LLM provider through the Stripe Projects catalog rather than signing up by hand.

The marketplace architecture decision, made with a compatibility matrix that blocks invalid Connect configurations instead of describing them.

Stripe's version-upgrade guide: move API versions and SDKs without breaking your integration.

Find vendors and partners for a job-to-be-done — and, where supported, let the agent purchase and consume the service.

Give an agent a webhook-driven inbox with the sender-allowlist and content-filtering patterns that block prompt injection from inbound email.

The generalist Postgres skill the ecosystem was missing — schema, indexing, extensions and migrations, from a Postgres company.

Anthropic's own sales stack: research → outreach → call prep → pipeline, 36 skills in one plugin.

Hookdeck's webhook playbook: 40 provider-specific skills covering signature verification, idempotency, and event handling — each with runnable examples.

Stripe's answer to agentic checkout: one-time payment credentials so an agent can buy without ever seeing the underlying card.

Diagrams generated from live infrastructure rather than from a prompt — it reads the actual resource group and draws what is really there.

Vendor-official voiceover generation across 90+ languages, from the company that defined the category. Ships with evals, which almost no skill does.

Transcription and subtitle generation as a first-class skill — the media job agents are asked for most and could not previously do well.

Chrome's own team, giving agents the DevTools protocol: drive it, inspect it, debug it.

The registrar half of the stack: buy the domain, set the DNS, stand up the site — from one plugin.

Paddle's own integration playbook: ten skills for Checkout, webhooks, pricing pages, and subscription lifecycle on the merchant-of-record platform.

Zero-downtime Postgres migrations, with the locking behaviour spelled out — which ALTER TABLE takes an AccessExclusiveLock and what to do instead.

Multimodal extraction across documents, images, audio and video through one Azure client — Microsoft-authored, with an explicit trigger list.

Batch document translation that preserves layout — the part that breaks when you translate a PDF by extracting text and re-flowing it.

Localise video while keeping the original speaker's voice — and correct the transcript before regenerating, rather than accepting the first pass.

Neon serverless Postgres done right — branching, pooling, and scale-to-zero, from Neon.

Twilio's official Developer Kit: 55 skills across SMS, WhatsApp, Voice, Verify, SendGrid, and compliance — plus the Twilio MCP. Public beta.

One skill across Postgres, MySQL, SQL Server, MariaDB and SQLite — and its actual job is forcing explore-before-query on real schemas.

Schema design decisions made explicitly: data types, key strategy, JSONB versus columns, and when partitioning earns its complexity.

Local browser with no credentials, or a hosted Browserbase session with CAPTCHA solving and residential proxies when the target is protected.

Diff-aware adversarial QA: it reads the git diff and tests only what changed, across correctness, accessibility, layout and UX.

Composio's own skill for 1,000+ external apps: the CLI for direct actions, the SDK and Tool Router for multi-user agents with per-user OAuth.

Supabase done right. RLS policies, edge functions, realtime, auth — in idiomatic patterns.

Prisma migrations and queries by the book. Index-aware, migration-safe, type-correct.

Caching without the bugs. Invalidation, write-through, cache-aside, distributed locks.

A self-updating vector-database skill: it fetches current Qdrant guidance at run time instead of shipping a snapshot that rots.

Slack's own Block Kit skill — and the rare vendor skill that needs no token, because it validates against Slack's public API.

Deploy and register the domain in the same session — Zeabur is its own registrar, so both are one CLI.

The deepest MoR skill coverage after Stripe: one routed skill from checkout to go-live.

SaaS email as skills: Loops API, CLI, LMX markup, deliverability practice.

Web scraping, search, and browser automation built to be agent-friendly.

Ship to a live Vercel URL from chat; with no account, it returns a claim link instead of stopping.

GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits.

OWASP-published review, SCA, secrets and threat-modelling skills — the most citable provenance available for security review vocabulary.

Transactional email the Postmark way: send, inbound, templates, webhooks.

Full-stack WorkOS implementation with auth provider migration paths.

Deterministic web control. ref-based clicks/fills, no flaky selectors, parallel sessions.

shadcn/ui context: components, patterns, and the right composition by default.

Box as an agent surface, plus the contract-review workflows nothing else in the catalog covers.

Runway-authored integration skills: current API contracts and the official SDK, not a remembered endpoint list.

Brand-checked design output at volume — the production half of design work.

The geospatial gap, filled by the vendor that defines it: data on a map, done properly.

The pedagogy library: backwards design, rubric generation, formative assessment, learning progressions.

The ledger, not the checkout: categorise, reconcile, invoice, file.

Data-driven document generation: one template, a thousand filled documents.

The top of the funnel: find the company, find the person, enrich the row.

Pre-handoff a11y audit that catches what design QA misses.

TDD with red/green/refactor as a concrete TypeScript walkthrough.

Strip the AI tells. Multi-pass editing for content that reads opinionated, not generated.

PlanetScale's own safety review for agents. Inventory, Insights, schema recommendations, change gates.

Netlify-authored deploy flow. Auth, site linking, Deploy Previews, production promotes.

The multi-channel notification slot nothing else covers: push, in-app and chat alongside email, with copy guidance per channel. No credentials required.

ADR authoring + design review. Trade-offs, consequences, alternatives.

Disciplined debugging loop. Reproduce, isolate, diagnose, fix.

The pre-ship checklist that catches the embarrassing stuff.

Technical writing that engineers will actually read and update.

Incident triage + comms + blameless postmortem in one harness.

System design from requirements. APIs, data, boundaries, scale.

Honest tech-debt audit with a prioritized cleanup backlog.

Layered test plan sized to the change's risk profile.

Single seed prompt → cohesive token system. Tokens that look intentional, not generated.

A vendor-maintained rule corpus for secure code review — one reference file per vulnerability class, from SQL injection to Terraform misconfiguration.

The SQLite slot, filled by Turso — and unusually, a skill that actively steers the agent off the stale API surface web search returns.

A full SEO platform as skills: briefs, audits, backlink gaps, AI-search share of voice.

The largest payment processor, first-party: checkout to disputes to payouts.

Programmatic access to the reference manager academia actually uses.

One-command productivity bootstrap. Memory, tasks, dashboard.

57 React/Next.js performance rules, applied as a structural review on your code.

Semgrep's own scanning skill: run the industry-standard SAST engine across 30+ languages, and author custom rules for your codebase's patterns.

Run the marketplace's scrapers, or turn your own scraper into a deployable Actor.

Senior-designer feedback on demand. Hierarchy, usability, consistency, motion.

Turn a final design into a spec engineers can implement directly.

Design-system hygiene at speed. Audit, document, extend.

Microcopy that respects the user. Errors, empty states, CTAs, onboarding.

Lock generated UIs to a brand. Anthropic's own guidelines, formalized as a skill.

100+ accessibility and UX rules from Vercel, applied as a structural audit on your UI code.

Senior DevOps engineer persona — CI/CD, containers, blue-green/canary, IaC across clouds.

Visual art from prose. PNG and PDF outputs that look intentionally designed.

Internal comms that read consistent. Newsletters, status reports, FAQs, updates.

The Notion API from the agent loop, via Notion's own ntn CLI.

Deploy, debug, and scale on Render: Blueprint generation with validation built in.

Boolean prop hell → compound components. Cleaner React component APIs by construction.

Headless browser as an agent tool. Navigate JS-heavy pages, fill forms, extract content.

The remediation half of security work: scan, fix, validate the fix, open the PR. Batch mode handles a whole backlog of CVEs in one pass.

The seller’s day: prep the call, run the deal, brief the board.

Turn raw research into themes, segments, and a prioritized next-steps list.

Research-ops in a skill. Plan the study, run it, synthesize the findings.

Brand-voice QA before content ships. Severity-ranked findings with rewrites.

Launch-ready campaign brief in one pass. Calendar, channels, metrics included.

Battlecards on demand. Positioning gaps, content holes, threat assessment.

Channel-correct content with SEO and CTA awareness baked in.

Channel-specific draft + headline options. SEO-aware out of the box.

End-to-end drip campaigns. Copy + timing + branching + benchmarks.

Executive-ready performance reports with next-period priorities.

Full SEO health check with quick wins vs strategic investments split.

Workplace memory that actually understands your team's shorthand.

Lightweight task tracking in a single markdown file.

Periodic memory + task refresh from real activity.

A three-stage writing workflow: gather context, refine the structure, then test the draft on a reader.

The academic writing half nothing else covers: manuscript, grant, peer review, reviewer response.

A named design canon for charts, not another plotting wrapper.

Oracle's own FP&A analyst: variance decomposition, close readiness, board narratives.

Tailor a plugin to your org's stack in one pass.

Scaffold a new plugin from scratch with guided prompts.

Terraform expertise on tap. State inspection, module validators, safety-first IaC.

Kubernetes hardening by the book. NetworkPolicies, RBAC, OPA, service mesh.

Astro from scaffold to live site — content collections, search, i18n, multi-host deploy.