exa-search

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the main risk is transitive installation of a third-party personal GitHub skill via the official skills CLI. No clear malicious data exfiltration is shown in the provided text, yet the trust chain, API-key exposure to unreviewed skill code, and external-content handling make this medium risk.

Confidence: 84%Severity: 66%
Audit Metadata
Analyzed At
Apr 14, 2026, 06:32 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fexa-search%2F@3d4e90ad2601672a6b090abade3f2efdd2ff6ca6