Maverick Exa

• Analyzed: May 13, 2026, 11:36 AM
• Findings: 1
• Version: 1.0.0
• Hash: ae1768c51b93195491cecda573fde457f0d1b96e7ace20a127b346460f97692b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate integration for the Exa search engine via the Model Context Protocol (MCP). The instructions in SKILL.md and references/exa-mcp-setup.md are well-defined, focusing on web and people research using the official mcp.exa.ai endpoint. It correctly utilizes environment variables (${MAVERICK_EXA_API_KEY}) for secret management and contains no evidence of prompt injection, data exfiltration, or unauthorized execution.