exa-researcher

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.85). Suspicious: an unknown GitHub user/repo with mismatched metadata is directing you to install via an untrusted npm command (npx clawhub@latest), which can execute arbitrary code and is a common vector for malware distribution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill “exa-researcher” is described as using Exa AI MCP tools for comprehensive research, which at runtime typically involves fetching public web pages/search results and passing their extracted body text into the agent’s LLM context (outsider-authored free text from public web content).