Best Action-Taking Skills

Microsoft's first-party Playwright skill, invoked through the CLI — the reference implementation for driving a real browser, with no credentials required.

Firebase-authored. Init, configure, and one-step deploy to Firebase Hosting / App Hosting.

Local browser with no credentials, or a hosted Browserbase session with CAPTCHA solving and residential proxies when the target is protected.

Diff-aware adversarial QA: it reads the git diff and tests only what changed, across correctness, accessibility, layout and UX.

Provision a Postgres, Redis, auth, or LLM provider through the Stripe Projects catalog rather than signing up by hand.

Resend's own API skill: send transactional and batch email, handle inbound webhooks, and manage domains, templates, and keys.

Give an agent a webhook-driven inbox with the sender-allowlist and content-filtering patterns that block prompt injection from inbound email.

Multimodal extraction across documents, images, audio and video through one Azure client — Microsoft-authored, with an explicit trigger list.

Batch document translation that preserves layout — the part that breaks when you translate a PDF by extracting text and re-flowing it.

Chrome's own team, giving agents the DevTools protocol: drive it, inspect it, debug it.

Stripe's answer to agentic checkout: one-time payment credentials so an agent can buy without ever seeing the underlying card.

Vendor-official voiceover generation across 70+ languages, from the company that defined the category. Ships with evals, which almost no skill does.

Transcription and subtitle generation as a first-class skill — the media job agents are asked for most and could not previously do well.

Localise video while keeping the original speaker's voice — and correct the transcript before regenerating, rather than accepting the first pass.

Find vendors and partners for a job-to-be-done — and, where supported, let the agent purchase and consume the service.

One skill across Postgres, MySQL, SQL Server, MariaDB and SQLite — and its actual job is forcing explore-before-query on real schemas.

Generative video from the vendor developers name first, as a skill set rather than an SDK crawl.

1,000+ SaaS integrations as one skill. OAuth lifecycle, scoped credentials, structured actions.

First-party HubSpot CRM operations for agents: lookups, deals, quote-to-cash, reporting.

The deepest MoR skill coverage after Stripe: 17 skills from checkout to go-live.

SaaS email as skills: Loops API, CLI, LMX markup, deliverability practice.

Box as an agent surface, plus the contract-review workflows nothing else in the catalog covers.

Web scraping, search, and browser automation built to be agent-friendly.

Paddle's own integration playbook: ten skills for Checkout, webhooks, pricing pages, and subscription lifecycle on the merchant-of-record platform.

Transactional email the Postmark way: send, inbound, templates, webhooks.

Real exploits, no false positives. 96.15% exploit success across 50+ vuln types.

Semgrep's own scanning skill: run the industry-standard SAST engine across 30+ languages, and author custom rules for your codebase's patterns.

The vector-database skill that ships executable scripts rather than prose — the agent runs the query instead of describing it.

Deterministic web control. ref-based clicks/fills, no flaky selectors, parallel sessions.

Stripe done right. Checkout, subscriptions, webhooks, idempotency, metered billing.

Notion API: page/database CRUD, block hierarchies, rich text, schema sync.

Shopify Storefront API: cart, checkout, metafields, customer accounts, Hydrogen patterns.

GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits.

All of Railway in one skill: provision, deploy, debug — listed in the official plugin marketplace.

Test local webapps with Playwright. Generation, run, report — end-to-end.

FHIR to prior-auth to ICD-10 coding: the official payer/provider/pharma toolkit.

Real feature verification — run the app, drive it, prove it works.

Ship to a live Vercel URL from chat — auto-detects the framework, returns a claim link.

The remediation half of security work: scan, fix, validate the fix, open the PR. Batch mode handles a whole backlog of CVEs in one pass.

The largest payment processor, first-party: checkout to disputes to payouts.

The anti-bot problem, handled: proxies, SERP, and structured extraction at scale.

One-command app launch tailored to your project type.

Recurring task runner. Self-paced or interval-based.

Cron for remote Claude Code agents. Set it and forget it.

Headless browser as an agent tool. Navigate JS-heavy pages, fill forms, extract content.

Run the marketplace's scrapers, or turn your own scraper into a deployable Actor.

Netlify-authored deploy flow. Auth, site linking, Deploy Previews, production promotes.

Cloudflare-authored. Workers and Pages deploys, Wrangler config, KV/D1/R2 from chat.

Brand-checked design output at volume — the production half of design work.

Repo-to-live-URL on GitHub Pages: Actions workflow, custom domain, Jekyll, troubleshoot.

Deploy, debug, and scale on Render: Blueprint generation with validation built in.

A HubSpot admin in a plugin: audits, dedup, scoring, lifecycle hygiene — 37 skills deep.

Drive the iOS Simulator from the agent loop. Build and test iOS apps.

Playwright patterns: clicks, fills, waits, retries. The do-it-right defaults.

ffuf web fuzzing for authorized pentests. Common modes, payloads, and gotchas.

Operate a Lemon Squeezy store from the agent: customer lookup, refunds, discount codes, receipts, and a sales dashboard — six support-and-revops skills.