Add Xquik and TweetClaw Twitter agent skills

[kriptoburak]

Summary

Adds 2 related X/Twitter agent skills:

• xquik-twitter-api for direct Xquik REST API, SDK, MCP, and webhook integrations.
• tweetclaw-openclaw for OpenClaw users who want the packaged TweetClaw plugin for scrape tweets, search tweets, search tweet replies, post tweets, post tweet replies, follower export, user lookup, media, monitors, webhooks, and giveaway draws.

Also fixes stale Goose Skills Marketplace and GitHub compare links in the repo docs.

Why this belongs here

• Fits the repository's API integration and domain knowledge guidance.
• Gives Goose-compatible agents both a direct API path and an OpenClaw plugin path.
• Keeps credentials out of examples and requires confirmation for visible or account-changing actions.
• Uses the official TweetClaw GitHub repo, npm package, and ClawHub discovery page.

Validation

• Ran node scripts/validate-skills.mjs.
• Ran git diff --check.
• Checked linked public pages in the touched docs and skills.
• Confirmed @xquik/tweetclaw@1.6.31 npm metadata with openclaw.install.npmSpec.
• Ran targeted diff scans for credentials, private implementation wording, and dash style.

Note: node scripts/skills-security-scan.mjs --skills xquik-twitter-api,tweetclaw-openclaw writes a report with FAIL=0 and expected URL warnings, then still exits on the existing ReferenceError: sks is not defined scanner footer bug.

[github-actions]

✅ Validate Skills — PASSED

Summary: FAIL=0 · WARN=0
Changed skill dirs: tweetclaw-openclaw,xquik-twitter-api

Output (last 200 lines)

✅ Found 9 skill directories.
✅ api-setup: structure validated
✅ beads: structure validated
✅ code-review: structure validated
✅ frontend-design: structure validated
✅ goose-blog-post: structure validated
✅ rp-why: structure validated
✅ testing-strategy: structure validated
✅ tweetclaw-openclaw: structure validated
✅ xquik-twitter-api: structure validated

Structure validation PASSED.

[github-actions]

🛡️ Skills Security Scan — WARN

Summary: FAIL=0 · WARN=13 · FILES=2
Changed skills scanned: tweetclaw-openclaw, xquik-twitter-api

⚠️ WARN requires investigation + CODEOWNERS review.

⚠️ Warnings

tweetclaw-openclaw

• network:url — tweetclaw-openclaw/SKILL.md:25

- GitHub: https://github.com/Xquik-dev/tweetclaw

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — tweetclaw-openclaw/SKILL.md:26

- npm: https://www.npmjs.com/package/@xquik/tweetclaw

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — tweetclaw-openclaw/SKILL.md:27

- ClawHub discovery: https://clawhub.ai/plugins/@xquik/tweetclaw

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — tweetclaw-openclaw/SKILL.md:28

- Xquik: https://xquik.com

Guidance: Review: URL present; confirm expected destination and purpose.

xquik-twitter-api

• network:curl-wget — xquik-twitter-api/SKILL.md:62

curl "https://xquik.com/api/v1/x/tweets/search?q=agent%20skills&limit=10" \

Guidance: Review: network tool usage; ensure it's necessary and safe.

• network:url — xquik-twitter-api/SKILL.md:25

- Platform: https://xquik.com

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — xquik-twitter-api/SKILL.md:26

- API docs: https://docs.xquik.com

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — xquik-twitter-api/SKILL.md:27

- Skill repository: https://github.com/Xquik-dev/x-twitter-scraper

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — xquik-twitter-api/SKILL.md:28

- TypeScript SDK: https://github.com/Xquik-dev/x-twitter-scraper-typescript

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — xquik-twitter-api/SKILL.md:29

- Python SDK: https://github.com/Xquik-dev/x-twitter-scraper-python

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — xquik-twitter-api/SKILL.md:30

- Go SDK: https://github.com/Xquik-dev/x-twitter-scraper-go

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — xquik-twitter-api/SKILL.md:58

Use `https://xquik.com/api/v1` as the base URL and pass the API key through the

Guidance: Review: URL present; confirm expected destination and purpose.

• network:url — xquik-twitter-api/SKILL.md:62

curl "https://xquik.com/api/v1/x/tweets/search?q=agent%20skills&limit=10" \

Guidance: Review: URL present; confirm expected destination and purpose.

---

Notes: This comment auto-updates on each push to keep PRs clean.

[kriptoburak]

Reviewed the current scan warnings. The remaining warnings are expected for this skill:

• External URLs point to Xquik docs, SDK repos, and API endpoints needed for integration instructions.
• The single curl example uses a read-only tweet search endpoint and a placeholder API key header.
• Validation, Semgrep, zizmor, DCO, and the repo security gate are green.

I also closed the older, broader duplicate #19 so this smaller PR is the active Block submission.

[kriptoburak]

Reviewed the refreshed scan warnings on c04315c.

• xquik-twitter-api keeps external docs, SDK, and API URLs plus one read-only curl example with a placeholder API key header.
• tweetclaw-openclaw links only to the official TweetClaw GitHub repo, npm package, ClawHub discovery page, and xquik.com. It adds no scripts or network commands.
• Validate Skills, Skills Security Scan, DCO, and the repo security status are green. The remaining blocked merge state is the repository's two-human-approval policy.