Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
indexing
v1.0.1When the user wants to fix indexing issues from Search Console, use noindex, or implement Google Indexing API. Also use when the user mentions "fix indexing,...
⭐ 0· 53·0 current·0 all-time
byKostja Zhang@kostja94
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description (fixing indexing, noindex, Google Indexing API) match the SKILL.md content: troubleshooting guidance, noindex guidance, and Indexing API notes. The topics and recommended fixes are appropriate for an SEO indexing helper.
Instruction Scope
The SKILL.md explicitly tells the agent to read local files .claude/project-context.md or .cursor/project-context.md for site URL and goals. The skill metadata declared no required config paths, so the instructions allow the agent to access local project files without that being declared. If the agent runs autonomously it may read these files; users should be aware of that file access. The doc otherwise stays on-topic (GSC, robots.txt, noindex, canonical).
Install Mechanism
No install spec and no code files — instruction-only skill. This has the lowest installation risk because nothing is downloaded or written to disk by the skill itself.
Credentials
The skill declares no environment variables or credentials, which is consistent for an advisory skill. However, it documents how to use the Google Indexing API (service account, Search Console ownership, quota). If the agent were expected to call the Indexing API automatically, it would need sensitive GCP service-account credentials; those credentials are not declared here. That mismatch should be clarified before giving the agent any credentials or automation rights.
Persistence & Privilege
The skill is not always-enabled and does not request any persistent system presence. It does not modify other skills or system-wide settings according to the provided metadata.
What to consider before installing
This is an instruction-only SEO helper that gives reasonable advice about indexing, noindex, and the Google Indexing API. Before installing or enabling it, note two things: (1) the instructions tell the agent to read local project-context files (.claude/project-context.md or .cursor/project-context.md) even though no config paths were declared — review those files for any sensitive information you wouldn't want the agent to read; (2) the Indexing API guidance requires a GCP service account and Search Console ownership to operate — do NOT hand over service-account keys or other credentials unless you explicitly intend the agent to perform indexing actions, and only after you trust the skill. If you only want advice, keep the skill as read-only guidance and avoid providing credentials or enabling automated API calls.Like a lobster shell, security has layers — review code before you run it.
latestvk9712gx2dtb41736q64sc55w1x84aw2r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
