Improve source-backed X guidance and repair validation

[kriptoburak]

Skill Update

Skill: skills/social

Summary

• Add source-backed X guidance with direct Xquik REST tweet search and MCP references.
• Document the current MCP explore and xquik read flow.
• Keep missing engagement fields unknown and credentials outside conversations and content.
• Repair both local validation wrappers so they run from the repository root.
• Remove invalid npm caching from workflows that intentionally install without a lockfile.

Type of update

• Bug fix
• Improved instructions
• Added references/scripts
• Other

Independent Repository Fixes

The latest main validation run fails in actions/setup-node because both npm-cached workflows require a lockfile, while this repository intentionally ignores package-lock.json and installs with npm install --no-package-lock. Removing cache: npm lets installation and validation run.

Both shell validators also resolve the wrong working directory. validate-skills.sh moves one directory above the repository, and validate-skills-official.sh remains inside the temporary skills-ref checkout after installation. The repaired scripts now validate this repository correctly.

Failure evidence: https://github.com/Cesarjoquin/Marketing-Skills/actions/runs/28630980525

Checklist

• Changes are focused and minimal
• SKILL.md is under 500 lines (420 lines)
• No sensitive data or credentials
• Tested locally with AI agent

Validation

• npm run validate (typecheck, lint, 11 tests, build)
• npm run validate-skills (45 passed, 0 issues)
• bash validate-skills.sh (45 passed, 0 issues)
• bash validate-skills-official.sh (45 passed, 0 failed)
• shell syntax, workflow YAML, and Markdown link validation
• git diff --check
• Xquik REST tweet search and MCP documentation HTTP checks
• complete audit of comments, reviews, threads, check suites, commits, conflicts, and repository instructions

The 2 GitHub Actions suites currently report action_required with zero jobs. A maintainer must approve fork workflow execution.

Xquik is an independent third-party service. Not affiliated with X Corp. "Twitter" and "X" are trademarks of X Corp.

[kriptoburak]

Rebuilt on current upstream as 1 focused, SSH-signed commit: 67598f8.

The public branch now contains:

• direct current Xquik REST tweet-search documentation
• the MCP explore then xquik read flow
• OAuth 2.1 and API-key handling kept outside conversations
• explicit hosted-service and X Corp independence wording
• repository-root fixes for both validator wrappers
• removal of invalid npm caching from both lockfile-free workflows

Fresh validation passed: typecheck, lint, 11 tests, build, TypeScript Skill validation (45/45), legacy wrapper validation (45/45), shell syntax, git diff --check, and live Xquik documentation checks. GitHub verifies the commit signature.

No maintainer or bot request is outstanding. GitHub currently exposes no runnable check jobs; maintainer approval is required for fork workflow execution.