Mcp Skill

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0b2ff538b9772e84a7b00d064514c31ace6648df80270cfc0720ead7dd9bbe3e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains only metadata and documentation files (`_meta.json`, `SKILL.md`, `README.md`). The `SKILL.md` describes the skill's purpose as wrapping the MCP at `https://mcp.exa.ai/mcp` and lists several research-oriented tools. There is no executable code, no instructions for the agent to perform any malicious actions (e.g., data exfiltration, unauthorized network calls, shell commands), and no prompt injection attempts. The mentioned URL is a legitimate domain associated with Exa.ai.