exa-search
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill configuration and tool definitions do not exhibit malicious patterns. Setup instructions for the Exa MCP server use standard placeholders for sensitive credentials and reference well-known, legitimate search services.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted data from the public web. Ingestion points:
web_search_exaandget_code_context_exainSKILL.md. Boundary markers: Absent. Capability inventory: Neural web search and code context retrieval. Sanitization: Absent. This surface is inherent to the primary function of a search-based skill and is managed by the AI agent's internal content safety measures.
Audit Metadata