exa-search
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
exa-mcp-serverpackage through thenpxcommand for server initialization. This is a standard method for deploying tools from the well-known search service. - [CREDENTIALS_UNSAFE]: Configuration instructions use a placeholder for the API key (
YOUR_EXA_API_KEY_HERE), adhering to security best practices for secret management. - [COMMAND_EXECUTION]: The skill defines specialized tools for web and code search (
web_search_exaandget_code_context_exa). These tools provide structured access to search APIs and do not expose arbitrary shell execution capabilities.
Audit Metadata