skills/jeremylongshore/claude-code-plugins-plus-skills/exa-install-auth/Socket

exa-install-auth

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's purpose is legitimate, but its install instructions point to package names that do not match Exa's official SDKs while also guiding the user to store an Exa API key for those packages. Auth setup itself is normal, but the dependency provenance is inconsistent with the claimed vendor integration, making the overall skill high risk.

Confidence: 92%Severity: 83%

Audit Metadata

Analyzed At

Mar 24, 2026, 05:45 PM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fexa-install-auth%2F@3945f1d9ad6edad7d15d45ffdba117b23a922bed