@cmo-so/skills 0.9.0 → 0.11.0

package/skills/cmo-search-intent/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "awareness"
   channels: "google-search"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-search-intent"
 ---
 # Search intent & SERP fit

package/skills/cmo-seo-audit/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "awareness"
   channels: "google-search,website"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-seo-audit"
 ---
 # SEO audit

package/skills/cmo-seo-monitoring/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "retention"
   channels: "google-search"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-seo-monitoring"
 ---
 # SEO change monitoring

package/skills/cmo-seo-opportunities/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "core"
   funnel_stage: "awareness"
   channels: "google-search"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-seo-opportunities"
 ---
 # SEO opportunities

package/skills/cmo-seo-plan/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "awareness"
   channels: "google-search"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-seo-plan"
 ---
 # SEO strategy & roadmap

package/skills/cmo-short-form-video/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "awareness"
   channels: "tiktok,instagram,youtube-shorts,linkedin"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-short-form-video"
 ---
 # Short-form video

package/skills/cmo-signup-flow/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "conversion"
   channels: "website,app"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-signup-flow"
 ---
 # Signup flow optimisation

package/skills/cmo-site-architecture/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "awareness"
   channels: "website"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-site-architecture"
 ---
 # Site architecture & internal links

package/skills/cmo-sms-whatsapp/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "retention"
   channels: "sms,whatsapp"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-sms-whatsapp"
 ---
 # SMS & WhatsApp marketing

package/skills/cmo-social-analytics/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "retention"
   channels: "linkedin,x,instagram"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-social-analytics"
 ---
 # Social analytics

package/skills/cmo-social-crisis/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "all"
   channels: "linkedin,x,instagram,facebook,tiktok,threads"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-social-crisis"
 ---
 # Social crisis response

package/skills/cmo-social-listening/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "awareness"
   channels: "reddit,x,linkedin,bluesky,mastodon,youtube,tiktok,forums"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-social-listening"
 ---
 # Social listening and topic pulse

package/skills/cmo-social-strategy/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "awareness"
   channels: "linkedin,x,instagram,tiktok,facebook"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-social-strategy"
 ---
 # Social media strategy

package/skills/cmo-team-access/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "core"
   funnel_stage: "all"
   channels: "cmo.so"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-team-access"
 ---
 # Team & account access
@@ -82,6 +82,9 @@ Removal is done in the CMO.so app: give `dashboard_link` with `page: "team"`. If
 - Suggest revoking apps not used for a long time or not recognised. `connected_app_revoke` (`grant_id`, `app`) disconnects one at once; it must be connected again to work. Never revoke the app in use now; the tool refuses it anyway.
 - `api_keys_list`: name, first characters, read or read-write, last used. The full key is never shown. Creating and revoking keys is in the app: `dashboard_link` with `page: "api_access"`. Suggest revoking unused keys and read-write keys where read is enough.
 
+### 6b. Invoices
+`invoices_list` (read-only) lists the user's latest invoices across the subscriptions they pay for: date, amount, status and a link to view or download each. Share the link the tool gives; never suggest a plan change.
+
 ### 7. Audit what was changed
 Before a security tidy-up, or when the user asks "who changed this?" or "what has Maggie done?", call `maggie_actions_list` (optional `limit`, 1-50, default 20). It lists, newest first, the changes Maggie made for this user on this website and the result of each (for example a team member added, an app revoked, a plan reordered). Use it to:
 - confirm that an earlier grant or revoke actually went through before repeating it;

package/skills/cmo-technical-seo/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "awareness"
   channels: "google-search,bing"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-technical-seo"
 ---
 # Technical SEO

package/skills/cmo-thought-leadership/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "awareness"
   channels: "linkedin,x"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-thought-leadership"
 ---
 # Founder thought leadership

package/skills/cmo-tiktok/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "core"
   funnel_stage: "awareness"
   channels: "tiktok"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-tiktok"
 ---
 # TikTok queue

package/skills/cmo-tiktok-posts/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "awareness"
   channels: "tiktok"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-tiktok-posts"
 ---
 # TikTok caption writing

package/skills/cmo-tracking-setup/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "all"
   channels: "ga4,gtm,google-ads,meta-ads"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-tracking-setup"
 ---
 # Tracking & UTM setup

package/skills/cmo-video-production/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "awareness"
   channels: "youtube,tiktok,instagram,linkedin"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-video-production"
 ---
 # Video production

package/skills/cmo-video-repurposing/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "awareness"
   channels: "youtube,linkedin,tiktok"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-video-repurposing"
 ---
 # Video & podcast repurposing

package/skills/cmo-wasted-spend/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "conversion"
   channels: "google-ads,meta-ads"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-wasted-spend"
 ---
 # Wasted ad spend finder

package/skills/cmo-website-setup/SKILL.md

@@ -7,12 +7,12 @@ metadata:
   tier: "core"
   funnel_stage: "all"
   channels: "cmo.so,wordpress,shopify,wix,api"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-website-setup"
 ---
 # Website setup & verification
 
-Before Maggie can publish, a website goes through three stages in CMO.so: added (Maggie reads it and builds its business profile), verified (the user proves they own it), and connected (CMO.so can deliver posts to the site's platform). This skill walks through them in order, picks the easiest verification route, identifies the platform, and hands the connection step to a computer when it needs keys or an admin login. It never asks for passwords or keys in chat.
+Before Maggie can publish, a website goes through three stages in CMO.so: added (Maggie reads it and builds its business profile), verified (the user proves they own it), and connected (CMO.so can deliver posts to the site's platform). This skill walks through them in order, picks the easiest verification route, identifies the platform, and opens the CMO.so app's connect form for the step that needs keys. It never asks for passwords or keys in chat.
 
 ## When to use
 - New user, new website, or a site stuck at "not verified" or "not connected".
@@ -84,10 +84,14 @@ For WordPress, `wordpress_plugin_get` shows the latest connector version and dow
 
 Send the matching row to whoever manages the site with `handoff_to_desktop` (`platform: "wordpress"`). Never ask for admin logins, hosting passwords or SSH access to fix it yourself.
 
-`connect_guides_get` covers WordPress, Shopify, Wix and the API route; there is no dedicated guide for other builders. If `platform_detect` reports one of them, say so plainly and offer the API route (`handoff_to_desktop` with `platform: "api"` sends the steps to whoever builds the site); do not improvise any other connection method.
+`connect_guides_get` covers WordPress, Shopify, Wix and the API route; there is no dedicated guide for other builders. If `platform_detect` reports one of them, say so plainly and offer the API route (`connect_form_open` with `platform: "api"`, or `vibe` when the user builds the site with an AI coding tool); do not improvise any other connection method.
 
-### 5. Hand off to a computer (a change)
-Creating keys, installing plugins and logging in to a site admin are done on a computer, not in chat. `handoff_to_desktop` emails the user a link to finish the step, optionally for one `platform` (`wordpress`, `shopify`, `wix`, `api`). Use it whenever the user is on a phone or the step needs credentials. Tell them which email address will receive it if the tool reports it.
+### 5. Connect in the app's form
+The keys themselves (a WordPress application password, a Shopify app's client ID and secret, a Wix API key) go into the CMO.so app's connect form, which checks them with the platform and saves them; they never pass through the chat. `connect_form_open` gives the form for one `platform` (`wordpress`, `shopify`, `wix`, `api`, `vibe`): a button in the CMO.so app's chat, a link (`app.cmo.so/posts?connect=…`) anywhere else. Say what to prepare first (from `connect_guides_get`), then give the form. The WordPress plugin route needs no typing at all and also verifies the website.
+
+If you are working in the user's own codebase (vibe coding), `npx @cmo-so/cli connect api-pull` creates the website key and writes it to `.env` without printing it; build the blog pages on `GET https://api.cmo.so/posts`, then `npx @cmo-so/cli connect api-pull --enable` once the user has seen them work.
+
+`handoff_to_desktop` still emails a link to finish later on a computer, optionally for one `platform`; offer it only when the user asks to do it later or elsewhere.
 
 ### 6. Confirm the state
 `setup_status_get` again. Report each stage: added / reading progress, verified, connected. When all are done, suggest `cmo-autopilot` to choose how often Maggie publishes and `cmo-brand-profile` to check what she learned.
@@ -98,7 +102,7 @@ Setup — example.com
 Added: yes (profile reading 80%)
 Verified: yes, by email
 Platform: WordPress
-Connected: not yet — install the CMO.so connector plugin; setup link emailed to you
+Connected: not yet — connect form opened in the CMO.so app (WordPress plugin)
 Next: cmo-autopilot once connected
 ```
 
@@ -110,11 +114,11 @@ User: "I just signed up. Add harbourcatering.co.uk and get it publishing."
 3. Preview `verify_email_start` `{email: "orders@harbourcatering.co.uk"}` → confirm. User reads back the code; preview `verify_email_confirm` `{code: "…"}` → confirm → verified.
 4. User does not know the platform: `platform_detect` → WordPress.
 5. `wordpress_plugin_get` → not installed. `connect_guides_get` → summarise the WordPress plugin route only.
-6. User is on a phone: preview `handoff_to_desktop` `{platform: "wordpress"}` → confirm.
+6. `connect_form_open` `{platform: "wordpress"}` → the user follows the plugin steps in the app.
 7. `setup_status_get` → profile reading in progress, verified, not connected.
 
 Result:
-> Added and verified by email. Platform: WordPress. Connected: not yet; the plugin steps were emailed to you. Next: `cmo-autopilot` once connected.
+> Added and verified by email. Platform: WordPress. Connected: not yet; the connect form is open in the CMO.so app. Next: `cmo-autopilot` once connected.
 
 ## Quality bar
 - [ ] Started from `setup_status_get`; skipped stages already done.

package/skills/cmo-weekly-report/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "core"
   funnel_stage: "all"
   channels: "cmo.so,google-search,ai-search"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-weekly-report"
 ---
 # Weekly marketing report

package/skills/cmo-x-growth/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "awareness"
   channels: "x"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-x-growth"
 ---
 # X (Twitter) growth

package/skills/cmo-youtube/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "core"
   funnel_stage: "awareness"
   channels: "youtube"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-youtube"
 ---
 # YouTube queue

package/skills/cmo-youtube-posts/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "connected"
   funnel_stage: "awareness"
   channels: "youtube"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-youtube-posts"
 ---
 # YouTube Short writing

package/skills/cmo-youtube-strategy/SKILL.md

@@ -7,7 +7,7 @@ metadata:
   tier: "standalone"
   funnel_stage: "awareness"
   channels: "youtube"
-  version: "0.9.0"
+  version: "0.11.0"
   docs: "https://cmo.so/skills/cmo-youtube-strategy"
 ---
 # YouTube channel strategy