exa-search
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate toolset for web, code, and company research using the Exa MCP server.
- [EXTERNAL_DOWNLOADS]: Instructions include installing the
exa-mcp-serverpackage vianpx. This is the standard installation method for the official MCP server provided by Exa, a well-known technology service. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to place their API keys in a local configuration file (
~/.claude.json) rather than hardcoding them or requesting them during runtime. - [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration was detected. The network operations are limited to the intended search and crawl functionality through the specified MCP server.
Audit Metadata