exa-company-research

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill unnecessarily forces all Exa searches through unrelated third-party `mcporter` instead of Exa's direct official path. That intermediary weakens install/data-flow trust and may widen credential exposure, while browser fallback adds moderate untrusted-content risk. No confirmed malware or overt exfiltration endpoint is present.

Confidence: 83%Severity: 61%
Audit Metadata
Analyzed At
Apr 2, 2026, 07:04 AM
Package URL
pkg:socket/skills-sh/CodeAlive-AI%2Fai-cofounder%2Fexa-company-research%2F@4d00305723dedf001325beef2193e49540c06650