Skills/npm/exa-mcp-server

exa-mcp-server@3.4.2

CAUTION

Publisher claims: "Connect AI agents to Exa for web search, content fetching, and multi-step research." Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher exa-labs · joined 0 days agoInstalls 57,817Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH

File permission modification commandpackage.json:39 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

File type combined with upload actionskills/search/SKILL.md:167 · File type combined with upload action — agent may exfiltrate local data files

AST07