Exa People Search

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:23 PM UTC
• Version:
  1.0.0

Overview

This is a focused Exa people-search helper with minor privacy and dependency caveats, but no evidence of hidden, destructive, or deceptive behavior.

Install only if you are comfortable with people-search queries, company names, roles, and profile URLs being sent to Exa through the referenced CLI. Confirm that tools/clis/exa.js comes from a trusted source, and keep secrets out of the local product-marketing context files because the skill may read them for task context.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 84% confidence
• Finding: The skill instructs the agent to automatically read a project-local file before asking the user questions, which can cause unintended access to local workspace data without explicit user awareness. In an agent environment, even a seemingly harmless context file may contain sensitive business information, and silent preloading expands the skill's data access surface beyond the immediate user request.

VirusTotal

63/63 vendors flagged this skill as clean.