exa-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of API error responses which could theoretically be manipulated by a malicious server. 1. Ingestion points: The
Quick Diagnostic Scriptsaves API responses fromhttps://api.exa.ai/searchto/tmp/exa-test.json. 2. Boundary markers: None are used when displaying the raw JSON output from the temporary file. 3. Capability inventory: The skill utilizesBash,Grep, andReadtools to execute diagnostics and inspect files. 4. Sanitization: Instructions advise users to redact evidence, though the diagnostic script outputs raw response data upon failure. - [COMMAND_EXECUTION]: The skill uses
Bashto perform network requests and process JSON data as part of its diagnostic functions. 1. Usescurlto interact with the official Exa API endpoint for connectivity testing. 2. Employspython3 -m json.toolto format diagnostic output for readability. 3. These operations are standard for debugging and align with the skill's stated purpose.
Audit Metadata