ClawHub

Indexnow Pro

v1.0.0

Instant search engine notification via IndexNow protocol. Ping Bing, Yandex, and IndexNow API to index new or updated pages within minutes instead of days. S...

⭐ 0· 59·0 current·0 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (IndexNow notification) match the included SKILL.md and script.sh. All network calls and examples target indexnow endpoints (api.indexnow.org, bing, yandex) or well-known alternatives (Google/Baidu when noted). The requested tools (curl, Node.js, python3) and actions (creating/hosting a public key file, submitting URLs or sitemaps) are expected for this functionality.
✓
Instruction Scope
Runtime instructions and the script confine themselves to gathering site URLs (sitemap), generating a public key file, and POST/GET calls to search engine endpoints. There are no instructions to read unrelated system files, collect system credentials, or exfiltrate data to unexpected endpoints. Example snippets demonstrate how to use WordPress REST API and Google/Baidu APIs — these are illustrative and not required by the skill itself.
✓
Install Mechanism
There is no install spec and no remote downloads; the package is instruction-only plus a local shell script. Nothing in the manifest writes arbitrary external code to disk or pulls binaries from untrusted URLs.
ℹ
Credentials
The skill declares no required environment variables or credentials. The documentation does include examples that use credentials (e.g., curl -u 'user:password' for WordPress, ${ACCESS_TOKEN} for Google, and sample key variables). These examples are expected for the described integrations but mean users should avoid pasting secrets into an agent; credentials are only needed if you choose to automate hosting/upload via authenticated APIs.
✓
Persistence & Privilege
The skill does not request persistent/always-on presence, does not modify other skills or system-wide settings, and allows autonomous invocation by default (normal). There is no evidence it attempts to persist credentials or alter agent configuration outside its scope.
Assessment
This skill appears to do what it says: extract URLs and call IndexNow/Bing/Yandex endpoints. Before running any provided scripts or pasting commands into a shell, review the script locally and run it yourself rather than giving the agent direct access to site admin credentials. The README includes examples that show using WordPress username:password or OAuth tokens for Google — those are only needed if you choose to use the examples that upload the key for you. The IndexNow key itself is meant to be public (hosted at https://yourdomain/{key}.txt). Ensure you have curl/python/node on your environment, test with a small batch first to avoid accidental rate limits, and only supply credentials to trusted, local processes (not to the skill or an untrusted remote).

Like a lobster shell, security has layers — review code before you run it.

latestvk971qs7me7yq6sq9j8wbfngc9s83gh4z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments