exa-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure secret management practices by referencing environment variables (e.g.,
process.env.EXA_KEY_RAG) instead of hardcoding API keys. - [SAFE]: The search implementation includes defensive coding patterns, such as role-based validation of search parameters (types, results count, categories) and domain filtering, to prevent unauthorized access scopes.
- [SAFE]: The key rotation procedure uses a standard verification step via
curltargeting the official Exa API endpoint (api.exa.ai) to confirm connectivity before switching traffic.
Audit Metadata