exa-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow invokes web_search_exa and get_code_context_exa on the Exa MCP server, meaning it will ingest outsider-authored web and GitHub/Stack Overflow/docs content chosen via user-provided queries (e.g., via “search for/look up/find”) without selecting a specific trusted item first.