exa-best-practices
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required runtime workflow in SKILL.md only defines use of first-party Exa tools for searching/fetching a known URL (web_search_exa/web_fetch_exa), and does not specify any monitored inbox/feed/ticket/comment ingestion or any read-before-selection of outsider-authored free text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata