index-push
When the user wants to get new or changed pages crawled and indexed by Google and Bing quickly, instead of waiting weeks for the sitemap to be read. Use after any deploy that adds or updates pages, and when the user says "get this indexed", "request indexing", "submit to Google", "submit URLs to ...
Install this skill
or
84/100
Security score
The index-push skill was audited on Nov 11, 2026 and we found 4 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 27
Command substitution pattern
SourceSKILL.md
| 25 | 3. **IndexNow key file**, deployed before the first submission: |
| 26 | ```bash |
| 27 | KEY=$(openssl rand -hex 16) |
| 28 | printf '%s' "$KEY" > public/$KEY.txt # any folder served at the site root |
| 29 | # commit, deploy, then confirm it prints the key and nothing else: |
medium line 30
Curl to non-GitHub URL
SourceSKILL.md
| 28 | printf '%s' "$KEY" > public/$KEY.txt # any folder served at the site root |
| 29 | # commit, deploy, then confirm it prints the key and nothing else: |
| 30 | curl -s "https://example.com/$KEY.txt" |
| 31 | ``` |
| 32 | The key is public by design (anyone can read the file), so it can live in `package.json`: |
medium line 41
Curl to non-GitHub URL
SourceSKILL.md
| 39 | ```bash |
| 40 | for p in /blog/new-post /zh/blog/new-post; do |
| 41 | curl -s -o /dev/null -w "%{http_code} $p\n" "https://example.com$p" |
| 42 | done |
| 43 | curl -s https://example.com/blog/new-post | grep -o '<link rel="canonical"[^>]*>' |
medium line 43
Curl to non-GitHub URL
SourceSKILL.md
| 41 | curl -s -o /dev/null -w "%{http_code} $p\n" "https://example.com$p" |
| 42 | done |
| 43 | curl -s https://example.com/blog/new-post | grep -o '<link rel="canonical"[^>]*>' |
| 44 | ``` |
| 45 | Every URL must return 200 (not a redirect), carry a self-referencing canonical, appear in the sitemap and be linked from at least one page Google already crawls (home, blog index, a footer "latest posts" block, a related post). Don't submit anything that fails these. |
Scanned on Nov 11, 2026
View Security Dashboard