Add Xquik skill

[kriptoburak]

Summary

Adds a built-in xquik skill for X data workflows through Xquik REST and MCP APIs.

Changes

• Adds skills/xquik/SKILL.md
• Documents API key handling, narrow REST examples, MCP access, and approval gates for persistent or bulk work
• Clarifies that xurl remains the right skill for direct account-scoped X API actions

Test evidence

python3 skills/skill-creator/scripts/quick_validate.py skills/xquik
git diff --check
perl -ne 'print if /\x{2014}|\x20\x2d\x2d\x20/' skills/xquik/SKILL.md
curl link checks for https://docs.xquik.com, API overview, and MCP overview
curl route probe for /api/v1/x/tweets/search returned HTTP 402 without credentials

Full pnpm check was not run because this checkout has no installed dependencies and this PR only adds a standalone skill file.

Checklist

• pnpm lint passes
• pnpm typecheck passes
• pnpm test passes
• Tests added for new behavior
• Docs updated if behavior or APIs changed

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8c90e6c8a9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Switch REST examples to x-api-key

Xquik API keys are documented for REST calls as the x-api-key header (the official docs and Xquik agent skill distinguish this from OAuth Bearer tokens), so users following these snippets with XQUIK_API_KEY will send the key in a header the REST API does not expect and their calls will be treated as unauthenticated. Please update the REST examples to use -H "x-api-key: ${XQUIK_API_KEY}" consistently.

Useful? React with 👍 / 👎.

[kriptoburak]

Addressed in 99140d1.

• REST examples now use x-api-key: ${XQUIK_API_KEY}.
• MCP auth text now matches the same documented API key header.

Validation:

• python3 skills/skill-creator/scripts/quick_validate.py skills/xquik
• git diff --check
• banned punctuation scan
• Xquik docs link checks returned HTTP 200