pp-exa

SUSPICIOUS: the core Exa-search purpose broadly matches the capability set, but the skill requires trusting a custom third-party CLI/MCP wrapper, persists extensive local history by default, and can send outputs to arbitrary webhooks. The author/package-owner mismatch and credential/data concentration in the wrapper make the footprint broader than a straightforward Exa integration.