The jobs, not the endpoints: migrate a live site, connect the domain, keep WordPress patched.
Collection
Best Action-Taking Skills
Skills that perform real side-effects on external systems — payments, browser flows, deployment. Read the security panel before installing.
62 skills · ranked by composite score
What to pick from Best Action-Taking Skills
62 Skills perform real side effects — firebase-hosting deploys, playwright-cli drives a browser, stripe-projects touches payment objects, resend-email sends mail that reaches actual inboxes. Read this page as a risk register as much as a ranking: every entry here can change state outside your machine, most need an API key with real scope, and the ones marked as requiring an MCP server will do nothing at all until that server is configured.
Curated
Best Action-Taking Skills
Firebase-authored. Init, configure, and one-step deploy to Firebase Hosting / App Hosting.
Microsoft's first-party Playwright skill, invoked through the CLI — the reference implementation for driving a real browser, with no credentials required.
Provision a Postgres, Redis, auth, or LLM provider through the Stripe Projects catalog rather than signing up by hand.
Resend's own API skill: send transactional and batch email, handle inbound webhooks, and manage domains, templates, and keys.
Give an agent a webhook-driven inbox with the sender-allowlist and content-filtering patterns that block prompt injection from inbound email.
Deploy and register the domain in the same session — Zeabur is its own registrar, so both are one CLI.
Local browser with no credentials, or a hosted Browserbase session with CAPTCHA solving and residential proxies when the target is protected.
Diff-aware adversarial QA: it reads the git diff and tests only what changed, across correctness, accessibility, layout and UX.
Find vendors and partners for a job-to-be-done — and, where supported, let the agent purchase and consume the service.
Stripe's answer to agentic checkout: one-time payment credentials so an agent can buy without ever seeing the underlying card.
Chrome's own team, giving agents the DevTools protocol: drive it, inspect it, debug it.
One skill across Postgres, MySQL, SQL Server, MariaDB and SQLite — and its actual job is forcing explore-before-query on real schemas.
Multimodal extraction across documents, images, audio and video through one Azure client — Microsoft-authored, with an explicit trigger list.
Batch document translation that preserves layout — the part that breaks when you translate a PDF by extracting text and re-flowing it.
Vendor-official voiceover generation across 70+ languages, from the company that defined the category. Ships with evals, which almost no skill does.
Transcription and subtitle generation as a first-class skill — the media job agents are asked for most and could not previously do well.
Localise video while keeping the original speaker's voice — and correct the transcript before regenerating, rather than accepting the first pass.
The registrar half of the stack: buy the domain, set the DNS, stand up the site — from one plugin.
1,000+ SaaS integrations as one skill. OAuth lifecycle, scoped credentials, structured actions.
The deepest MoR skill coverage after Stripe: 17 skills from checkout to go-live.
SaaS email as skills: Loops API, CLI, LMX markup, deliverability practice.
Paddle's own integration playbook: ten skills for Checkout, webhooks, pricing pages, and subscription lifecycle on the merchant-of-record platform.
Box as an agent surface, plus the contract-review workflows nothing else in the catalog covers.
Generative video from the vendor developers name first, as a skill set rather than an SDK crawl.
First-party HubSpot CRM operations for agents: lookups, deals, quote-to-cash, reporting.
Waterfall enrichment as a procedure, not a single provider call.
Stripe done right. Checkout, subscriptions, webhooks, idempotency, metered billing.
Shopify Storefront API: cart, checkout, metafields, customer accounts, Hydrogen patterns.
All of Railway in one skill: provision, deploy, debug — listed in the official plugin marketplace.
Test local webapps with Playwright. Generation, run, report — end-to-end.
Semgrep's own scanning skill: run the industry-standard SAST engine across 30+ languages, and author custom rules for your codebase's patterns.
GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits.
Transactional email the Postmark way: send, inbound, templates, webhooks.
Real feature verification — run the app, drive it, prove it works.
Web scraping, search, and browser automation built to be agent-friendly.
Notion API: page/database CRUD, block hierarchies, rich text, schema sync.
Ship to a live Vercel URL from chat — auto-detects the framework, returns a claim link.
The vector-database skill that ships executable scripts rather than prose — the agent runs the query instead of describing it.
The ledger, not the checkout: categorise, reconcile, invoice, file.
Real exploits, no false positives. 96.15% exploit success across 50+ vuln types.
The remediation half of security work: scan, fix, validate the fix, open the PR. Batch mode handles a whole backlog of CVEs in one pass.
The anti-bot problem, handled: proxies, SERP, and structured extraction at scale.
Programmatic access to the reference manager academia actually uses.
Cron for remote Claude Code agents. Set it and forget it.
Deterministic web control. ref-based clicks/fills, no flaky selectors, parallel sessions.
FHIR to prior-auth to ICD-10 coding: the official payer/provider/pharma toolkit.
The largest payment processor, first-party: checkout to disputes to payouts.
Netlify-authored deploy flow. Auth, site linking, Deploy Previews, production promotes.
Cloudflare-authored. Workers and Pages deploys, Wrangler config, KV/D1/R2 from chat.
Brand-checked design output at volume — the production half of design work.
Repo-to-live-URL on GitHub Pages: Actions workflow, custom domain, Jekyll, troubleshoot.
Run the marketplace's scrapers, or turn your own scraper into a deployable Actor.
Deploy, debug, and scale on Render: Blueprint generation with validation built in.
Headless browser as an agent tool. Navigate JS-heavy pages, fill forms, extract content.
A HubSpot admin in a plugin: audits, dedup, scoring, lifecycle hygiene — 37 skills deep.
Drive the iOS Simulator from the agent loop. Build and test iOS apps.
Playwright patterns: clicks, fills, waits, retries. The do-it-right defaults.
ffuf web fuzzing for authorized pentests. Common modes, payloads, and gotchas.
Operate a Lemon Squeezy store from the agent: customer lookup, refunds, discount codes, receipts, and a sales dashboard — six support-and-revops skills.