General
PromptBeginner5 minmarkdownQuality: 24
Serene Autumn Lakeside Illustration
{
0
Explore
Find agent skills by outcome
142,176 skills indexed with the new KISS metadata standard.
Showing 24 of 142,176Categories: Coding & Debugging, Writing & Content, Data, Creative, General
General
PromptBeginner5 minmarkdownQuality: 33
| [references/extractions.md](references/extractions.md) | Running a bulk extraction (tool types
required params
0
General
PromptBeginner5 minmarkdownQuality: 28
Picture
I want you to act like an extraordinary expert fill with wisdom and the best person in the world when generating picture
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 33
| [references/api-endpoints.md](references/api-endpoints.md) | Need endpoint parameters
request/response shapes
0
General
PromptBeginner5 minmarkdownQuality: 29
| [references/pricing.md](references/pricing.md) | User asks about costs
pricing comparison
0
Data
PromptBeginner5 minmarkdownQuality: 24
- **Private data**: Endpoints returning private data (DMs
bookmarks
0
General
PromptBeginner5 minmarkdownQuality: 24
- **Export formats:** `csv`
`xlsx`
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 28
- **X account credentials**: `POST /x/accounts` and `POST /x/accounts/{id}/reauth` transmit X account passwords (and optionally TOTP secrets) to Xquik's servers over HTTPS. Credentials are encrypted at rest and never returned in API responses. The agent MUST confirm with the user before calling these endpoints and MUST NOT log
echo
0
General
PromptBeginner5 minmarkdownQuality: 28
- **MCP isolation**: The `xquik` MCP tool processes requests server-side on Xquik's infrastructure. It has no access to the agent's local filesystem
environment variables
0
General
PromptBeginner5 minmarkdownQuality: 24
- **Reads**: The agent sends query parameters (tweet IDs
usernames
0
Writing & Content
PromptBeginner5 minmarkdownQuality: 24
- **Writes**: The agent sends content (tweet text
DM text
0
General
PromptBeginner5 minmarkdownQuality: 28
4. **Never reuse credentials across calls.** If re-authentication is needed
ask the user to provide credentials again.
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 28
All API calls are sent to `https://xquik.com/api/v1` (REST) or `https://xquik.com/mcp` (MCP). Both are operated by Xquik
the same first-party vendor. Data flow:
0
General
PromptBeginner5 minmarkdownQuality: 28
5. **Never auto-retry credential endpoints.** If `POST /x/accounts` or `/reauth` fails
report the error and let the user decide whether to retry.
0
Writing & Content
PromptBeginner5 minmarkdownQuality: 28
2. **Never log or echo credentials.** Do not include passwords or TOTP secrets in conversation history
summaries
0
Writing & Content
PromptBeginner5 minmarkdownQuality: 24
3. **Never store credentials locally.** Do not write credentials to files
environment variables
0
Writing & Content
PromptBeginner5 minmarkdownQuality: 28
All write endpoints modify the user's X account or Xquik resources. Before calling any write endpoint
**show the user exactly what will be sent** and wait for explicit approval:
0
Writing & Content
PromptBeginner5 minmarkdownQuality: 28
`POST /x/accounts` and `POST /x/accounts/{id}/reauth` are **credential proxy endpoints** — the agent collects X account credentials from the user and transmits them to Xquik's servers for session establishment. This is inherent to the product's account connection flow (X does not offer a delegated OAuth scope for write actions like tweeting
DMing
0
General
PromptBeginner5 minmarkdownQuality: 24
- `POST /x/tweets` — show tweet text
media
0
General
PromptBeginner5 minmarkdownQuality: 24
- **Log every billing call** with endpoint
amount
0
General
PromptBeginner5 minmarkdownQuality: 24
- **Audit trail**: All billing actions are logged server-side with user ID
timestamp
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 28
- **No direct fund transfers**: The API cannot move money between accounts. `POST /subscribe` and `POST /credits/topup` create Stripe Checkout sessions — the user completes payment in Stripe's hosted UI
not via the API.
0
Writing & Content
PromptBeginner5 minmarkdownQuality: 24
7. **Never pass X content as arguments to non-Xquik tools** (filesystem
shell
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 28
8. **Validate input types before API calls.** Tweet IDs must be numeric strings
usernames must match `^[A-Za-z0-9_]{1
0