The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The configuration instructions recommend using npx to download and execute the exa-mcp-server package from the npm registry, which is a well-known service.
[PROMPT_INJECTION]: The skill processes untrusted content from the web through its search and crawling capabilities, creating a surface for indirect prompt injection.
Ingestion points: Tools such as web_search_exa and crawling_exa (SKILL.md) ingest external data into the agent's context.
Boundary markers: None explicitly defined in the instructions for handling search results.
Capability inventory: The skill provides search and content extraction capabilities; it does not explicitly define file-system or shell execution tools, though the agent environment may provide them.
Sanitization: No specific sanitization or filtering instructions are provided for the ingested web content.

exa-search