exa-search
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate neural search functionality via the Exa platform, intended for web and technical research tasks.
- [EXTERNAL_DOWNLOADS]: Instructions involve using
npxto fetch and run theexa-mcp-serverpackage. This is the standard distribution method for this well-known service's MCP implementation and is documented neutrally. - [PROMPT_INJECTION]: The skill ingests untrusted data from the web via
web_search_exaandget_code_context_exa(SKILL.md), creating an indirect prompt injection surface. This is an inherent property of search-based skills and is managed by the agent's internal safety guardrails rather than specific skill-level mitigations.
Audit Metadata