exa-search
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the use of "npx exa-mcp-server" to provide search functionality. This fetches the official MCP server package from the npm registry, which is a well-known service.
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or data exfiltration were detected. The skill uses environment variable placeholders for API keys, following security best practices.
Audit Metadata