Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bobmatnyc/claude-mpm-skills --skill xquikgit clone --depth 1 https://github.com/bobmatnyc/claude-mpm-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bobmatnyc/claude-mpm-skills/xquik)<a href="https://agentmods.dev/skills/bobmatnyc/claude-mpm-skills/xquik"><img src="https://agentmods.dev/badge/skills/bobmatnyc/claude-mpm-skills/xquik/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bobmatnyc/claude-mpm-skills/xquik"><img src="https://agentmods.dev/badge/skills/bobmatnyc/claude-mpm-skills/xquik.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.02342 |
| Opus 5 | $0.00022 | $0.01171 |
| Sonnet 5 | $0.00009 | $0.00468 |
| Haiku 4.5 | $0.00004 | $0.00234 |
Grade A, and why
xquik scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sS "https://xquik.com/api/v1/credits" \ How it starts
The opening of the file, as written. The whole thing — 251 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Xquik - X Data Automation API
Overview
Xquik provides a REST API and MCP server for X data workflows. Use it for tweet search, tweet lookup, user lookup, user timelines, follower and following exports, media downloads, monitoring, signed event delivery, giveaway draws, compose flows, and approved X actions.
Public entry points:
- REST API:
https://xquik.com/api/v1 - MCP server:
https://xquik.com/mcp - Docs:
https://docs.xquik.com - Agent skill:
https://github.com/Xquik-dev/x-twitter-scraper
Authentication uses the x-api-key header. Agents need only the user-issued Xquik API key. Never request X passwords, 2FA codes, cookies, session exports, recovery codes, or browser profile data.
When To Use
Use Xquik when a project needs:
- X tweet search or tweet lookup by ID or URL
- User profile, follower, following, likes, media, or timeline data
- Bulk extraction jobs for followers, replies, quotes, retweets, media, lists, communities, Spaces, or article workflows
- Media download from X posts
- Ongoing account or keyword monitors
- HMAC-signed webhooks for X events
- Giveaway draws from tweet replies
- Tweet compose, style analysis, scoring, drafts, or approved publishing flows
- MCP access to the same API from coding agents
Prefer the narrowest endpoint that answers the request. Use bulk extraction only when a single lookup or paginated endpoint is not enough.
Authentication
Use an environment variable for the API key:
export XQUIK_API_KEY="xq_example"
Pass it with the x-api-key header:
curl -sS "https://xquik.com/api/v1/credits" \
-H "x-api-key: $XQUIK_API_KEY"
Do not put API keys in source files, command examples committed to repos, issue text, chat transcripts, screenshots, or logs. If an API key is exposed, treat it as compromised and rotate it in the Xquik dashboard.
REST Patterns
Use these public paths as starting points. Check the API reference for current request and response schemas.
| Goal | REST Path |
|---|---|
| Credit balance | GET /credits |
| Tweet by ID | GET /x/tweets/{id} |
| Search tweets | GET /x/tweets/search?q=... |
| User profile | GET /x/users/{id} |
| User tweets | GET /x/users/{id}/tweets |
| User likes | GET /x/users/{id}/likes |
| User media | GET /x/users/{id}/media |
| Followers and following | GET /x/users/{id}/followers, GET /x/users/{id}/following |
| Tweet replies, quotes, retweeters, thread | GET /x/tweets/{id}/replies, /quotes, /retweeters, /thread |
| Tweet favoriters | GET /x/tweets/{id}/favoriters |
| Media download | POST /x/media/download |
| Extraction estimate | POST /extractions/estimate |
| Create extraction | POST /extractions |
| Monitors | GET /monitors, POST /monitors |
| Webhooks | GET /webhooks, POST /webhooks, POST /webhooks/{id}/test |
| Events | GET /events |
| Giveaway draws | POST /draws, GET /draws/{id} |
| Trends and radar | GET /trends, GET /radar |
| Compose and drafts | POST /compose, POST /drafts |
| Approved X actions | POST /x/tweets, POST /x/tweets/{id}/retweet, POST /x/users/{id}/follow |
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 251 lines · 44 tokens per session scan A 246240a5a6a3
xquik is a skill published in the GitHub repository bobmatnyc/claude-mpm-skills (75 stars, last pushed 1mo ago), licensed MIT. It adds 44 tokens to every session and 2,342 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
twitter-cli
Use twitter-cli for ALL Twitter/X operations — reading tweets, posting, replying, quoting, liking, retweeting, following, searching, user lookups. Invoke whenever user requests any Twitter interaction.
hermes-tweet
Use Xquik in Hermes Agent for public X research, monitoring, thread summaries, creator discovery & approved actions. Not affiliated with X Corp. Use when the user requests X data or a named action. Trigger with "search X", "monitor X", "post tweet", or "X trends".
x_intel
Read X (Twitter) posts, search, timelines and user profiles via the official xurl CLI.
xquik-social-data
Use Xquik for X and Twitter social data workflows through its public API, SDKs, MCP server, webhooks, and installable agent skill.
X Content Advisor
Use when a user asks how to grow or make better content on X/Twitter, wants an account or post audit, asks why a post underperformed, needs a weekly content plan, or wants a draft rewritten, a posting-time experiment, or a recommendation-risk review of sensitive media using evidence from their own timeline. Works with…
twitter-api
A Twitter API alternative and X API alternative on fetcher.sh — pay-per-call in USDC via x402, or prepaid credits with a Bearer key, no OAuth and no developer application. Use when the user wants to search tweets by keyword, hashtag, or advanced operators (from:, to:, since:, until:, minfaves:, filter:), scrape a…