The Agent Skills Directory

[COMMAND_EXECUTION]: The bundled Node.js script (indexnow.mjs) performs standard command-line argument processing. It does not invoke shell commands, spawn subprocesses, or use dynamic code evaluation like eval() or Function(). Logic is contained within the script's own functions.
[EXTERNAL_DOWNLOADS]: The script fetches sitemap XML files and verifies key files from URLs provided via user arguments. These network operations are intrinsic to the tool's purpose (submitting site content to search engines) and use a specific, non-deceptive User-Agent string.
[DATA_EXFILTRATION]: No sensitive data access or exfiltration patterns were detected. The script communicates only with the official api.indexnow.org endpoint and the host specified by the user. The skill correctly identifies that the IndexNow key is intended to be public.
[CREDENTIALS_UNSAFE]: The script allows the use of an environment variable (INDEXNOW_KEY) for secret management, which is a recommended security practice. It does not hardcode any credentials.
[SAFE]: The code follows best practices for a standalone utility, utilizing standard Node.js modules (node:crypto, node:fs, node:path) and providing clear instructions on usage and verification.

indexnow