Add a safe Xquik skill and isolate statusline sessions

[kriptoburak]

Summary

• Add the xquik-x-data Claude plugin and cross-agent skill.
• Register it in the marketplace and every installation surface.
• Guide current Xquik REST, OAuth-first MCP, export, monitor, search, and signed webhook workflows.
• Make read-only defaults, approval boundaries, credential handling, untrusted-content treatment, and closed-source service status explicit.

Independent repository fix

The statusline selected the newest transcript anywhere under ~/.claude/projects, so another session could overwrite the active session model. It now uses the exact transcript_path supplied in the current statusline input. The repair also resolves the script's ShellCheck quoting findings and includes a permanent regression test with a newer decoy transcript plus a missing-transcript fallback.

Review audit

Greptile posted only a trial-expiry notice. It contains no code finding or requested change. No human review, inline thread, failed check, or conflict exists.

Validation

• Skill Creator quick_validate.py
• 7 marketplace entries and plugin manifests parse with matching names and versions
• bash -n statusline/statusline-command.sh statusline/statusline-command.test.sh
• shellcheck statusline/statusline-command.sh statusline/statusline-command.test.sh with 0 findings
• statusline/statusline-command.test.sh passes both scenarios
• all Xquik docs, OpenAPI, MCP, and source links return HTTP 200
• git diff --check
• exactly 1 SSH-signed commit on current upstream main

Xquik is an independent third-party service. Not affiliated with X Corp. "Twitter" and "X" are trademarks of X Corp.

[greptile-apps]

Your trial has ended. Reactivate Greptile to resume code reviews.

[kriptoburak]

Published repair commit 4a8d03a. The PR now includes the independent statusline correctness fix: model detection uses the current input transcript instead of whichever project transcript was globally newest, preventing cross-session model attribution. I also resolved all existing ShellCheck quoting findings and registered the seventh plugin in the README. Marketplace parity, 2 statusline fixtures, Bash syntax, ShellCheck, and diff checks pass.

[kriptoburak]

Rebuilt this branch on current main as 1 SSH-signed commit. The Xquik skill now documents OAuth-first MCP, read-only defaults, consent and credential boundaries, untrusted X-content handling, and the hosted service's closed-source status. The independent statusline repair now has a committed regression test proving that a newer decoy session cannot replace the active transcript model; its missing-transcript fallback is also covered. Skill validation, marketplace parity, Bash syntax, ShellCheck, both fixtures, public links, and diff checks pass. Greptile's trial-expiry notice was audited and requires no code change.