exa-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected in the skill instructions or provided code snippets.
- [CREDENTIALS_UNSAFE]: The skill promotes secure secret management by instructing the use of environment variables and git-ignored
.env.localfiles for theEXA_API_KEY, rather than hardcoding credentials. - [EXTERNAL_DOWNLOADS]: The skill references legitimate, well-known development tools and libraries (exa-js, vitest, tsx) from standard package registries.
- [COMMAND_EXECUTION]: Script usage is constrained to standard development lifecycle commands for local build, test, and watch processes.
Audit Metadata