exa-search
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the 'exa-mcp-server' package using the 'npx' command. This is used to connect to the official Exa search engine service.
- [PROMPT_INJECTION]: The skill implements tools that ingest untrusted content from the internet, creating a surface for indirect prompt injection.
- Ingestion points: Search results returned by the 'web_search_exa' and 'get_code_context_exa' tools.
- Boundary markers: Not explicitly defined in the current instructions; results are processed directly by the agent.
- Capability inventory: The skill enables web search and code context retrieval; it does not include dangerous local shell or file modification capabilities.
- Sanitization: Standard handling of search tool output without specific sanitization of retrieved text content.
- [SAFE]: No malicious patterns, obfuscation, or credential harvesting techniques were detected. The request for an API key uses standard placeholders and refers users to the official service provider.
Audit Metadata