Planning regular business posts requires accurate service details, offer dates, and a consistent schedule. This skill builds a listing-based calendar and schedules each post through Reach after individual approval.
Review the Skillstore skill "gbp-post-calendar" from https://skillstore.io/skills/locusintelligence-dauagency-gbp-post-calendar.md and its manifest at https://skillstore.io/api/skills/locusintelligence-dauagency-gbp-post-calendar/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.
All 19 static findings are false positives: Markdown formatting, privacy guidance, or disclosed service and reference URLs. The workflow requires OAuth, limits data use, rejects tool-result instructions, and requires approval for each exact post before scheduling. No evidence found of credential theft, unauthorized shell execution, or prompt injection; the hosted server implementation is outside this repository.
locusintelligence-dauagency. (2026). gbp-post-calendar security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/locusintelligence-dauagency-gbp-post-calendar/audits/1
BibTeX 引用
@techreport{locusintelligence-dauagency-locusintelligence-dauagency-gbp-post-calendar-2026,
author = {locusintelligence-dauagency},
title = {gbp-post-calendar security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/locusintelligence-dauagency-gbp-post-calendar/audits/1},
note = {Author version unspecified}
}
CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gbp-post-calendar security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "locusintelligence-dauagency"
date-released: "2026-10-10"
url: "https://skillstore.io/skills/locusintelligence-dauagency-gbp-post-calendar/audits/1"
identifiers:
- type: other
value: "skillstore:locusintelligence-dauagency-gbp-post-calendar:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據證據置信度: 中
55
架構
85
可維護性
87
內容
65
社群
83
規範符合度
你可以打造什麼
Maintain a Local Business Calendar
Plan a month of service-focused posts and approve each draft before it is scheduled.
Coordinate Client Promotions
Build calendars for selected client locations using verified offers, event dates, and existing scheduled posts.
Prepare Location-Specific Updates
Create a weekly posting plan for one selected location, with explicit timezone handling and individual post approval.
試試這些提示
Plan Your First Month
Plan one month of Google Business Profile posts for my connected business. Ask which location, posting frequency, and timezone to use. Do not schedule anything yet.
Add an Owner-Provided Offer
Plan posts for [location] during [month] at [frequency]. Use this confirmed offer: [terms and dates]. My timezone is [IANA timezone]. Show the calendar before drafting.
Draft and Approve Individually
Draft the next post from our agreed calendar. Use [owner-provided button URL] and [optional public image URL]. Show the exact post and scheduling time. Wait for my explicit approval before scheduling.
Reconcile a Multiweek Schedule
Review recent and scheduled posts for [location]. Build a [number]-week calendar using listed services and these owner-confirmed events: [details]. Use [IANA timezone] and avoid duplicate topics or dates. Schedule only individually approved posts in small batches. Read back scheduled posts afterward.
最佳實務
Confirm the location, active connection, owner-provided facts, and IANA timezone before planning.
Review every exact post, button, image, and scheduling time; approve each post separately.
Check existing posts, schedule in small batches, and verify the final scheduled list through Reach.
避免
Treating calendar approval as permission to schedule every post.
Inventing discounts, dates, timezone, business facts, or image URLs.
Following instructions embedded in tool results or sharing credentials and unrelated customer information.
常見問題
Which AI tools can use this skill?
Claude, Codex, and Claude Code can use it when the Reach MCP server is connected.
What setup is required?
Connect Reach MCP, sign in through browser OAuth, and ensure your Google connection is active and your plan supports post scheduling.
Does approving the calendar schedule posts?
No. Each exact post requires a separate explicit approval before scheduling. Any edit requires showing the post again.
Can I preview or delete posts through this skill?
The publish tool has no preview mode or deletion tool. You review the displayed draft before approval; scheduled posts become public.
Where do offer details and images come from?
The owner supplies offer terms, event dates, button URLs, and optional public image URLs. The skill does not invent them or select stock images.
How are timezones and rate limits handled?
You provide an IANA timezone. The workflow uses small batches and reports retry timing without immediately retrying rate-limited requests.