Agents

Installable SKILL.md for your agent

Each pack is a real SKILL.md served at a stable URL. Tell your agent to install the link, or curl it into the agent’s skills directory yourself. The same file works as a paste-in system prompt for agents that don’t support skills.

Two ways to install

1. Tell your agent the URL. Any agent that fetches links can read the SKILL.md, run it through its Skill Vetter, and drop it into its skills directory. Just say:

Install the quik.md skill at https://quik.md/docs/api/agents/hermes/skill.md
— or —
Install the quik.md skill at https://quik.md/docs/api/agents/openclaw/skill.md
— or —
Install the quik.md skill at https://quik.md/docs/api/agents/generic/skill.md

2. Or curl it manually. Each pack page has a one-liner per agent (Claude Code, OpenClaw, generic) that downloads the SKILL.md to the right path.

Vetting-friendly by design

Every SKILL.md ships with YAML frontmatter declaring risk: low, the exact network scope (https://quik.md/api/v1/* and nothing else), zero filesystem access, zero shell, and the one env var (QUIK_KEY) the user provides. Hand-authored, no obfuscation, no base64, no third-party fetches. Skill Vetter classifies all three packs as 🟢 LOW.

AI is off by default — and these skills keep it off

When you bring your own agent, the agent is the brain. It already classified the input, picked the project, parsed the due date. Asking the server’s organizer to redo that work is a double tax: extra latency, a hit against the user’s daily AI quota, and a Pro requirement on the hot path. So POST /api/v1/capture defaults to organize: false, and every SKILL.md below is wired to leave it false. Pass type and project_id directly — quik.md just stores them.

Packs

Pairing — no API key paste required

You don’t need to mint a key by hand. Each SKILL.md ships with a first-run pairing flow: when $QUIK_KEY is missing, the agent generates a one-time state, calls POST /api/v1/connect/start, and shows you a URL like https://quik.md/connect/agent?state=…. You open it, sign in, click Allow, and the agent polls POST /api/v1/connect/exchange to pick up the key automatically. Same handshake the Quik Mac app uses; single-use, 10-minute window, revocable from Settings → Developer.

Prefer the manual route? Mint a key and export it as QUIK_KEY. Treat the key like a password — anyone with it can read and modify your inbox.