exa-company-research
Warn
Audited by Socket on Apr 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is coherent, but the skill unnecessarily forces all Exa searches through unrelated third-party `mcporter` instead of Exa's direct official path. That intermediary weakens install/data-flow trust and may widen credential exposure, while browser fallback adds moderate untrusted-content risk. No confirmed malware or overt exfiltration endpoint is present.
Confidence: 83%Severity: 61%
Audit Metadata