exa-search

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but this wrapper mainly directs installation of a separate third-party skill from a personal GitHub repo. The main concern is transitive trust and unverifiable credential handling, not confirmed malicious behavior.

Confidence: 88%Severity: 57%
Audit Metadata
Analyzed At
Sep 14, 2026, 02:31 PM
Package URL
pkg:socket/skills-sh/claudiodearaujo%2Fizacenter%2Fexa-search%2F@a1cb1d9e64377e11d8c6f2a84c32f28b5d9a20cf93fcd0209aef50ba16c7b537
Security Audit — socket — exa-search