The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions specify the use of npx to download and execute the exa-mcp-server package from the npm registry. This is the official and standard method for configuring the Exa search integration.
[PROMPT_INJECTION]: The skill processes untrusted data retrieved from the web via search tools. This creates an attack surface for indirect prompt injection, where content from external sites could attempt to override agent instructions. The skill documentation does not currently list specific sanitization or boundary markers for this ingested content.

exa-search