Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Exa search helper, but users should remember that search terms and advanced research requests go to Exa's external MCP service.
Install only if you are comfortable sending search queries, URLs, company names, and people-search terms to Exa. Do not include secrets, credentials, confidential business details, or sensitive personal information in queries, and enable the advanced tool bundle only when you actually need those tools.
The skill advertises external search functionality but does not warn users that their queries and research terms are transmitted to Exa's remote MCP service. Users may inadvertently send sensitive prompts, internal project names, or proprietary research topics off-platform without informed consent, creating privacy and data-handling risk.
The documentation exposes crawling and people-search capabilities without any warning that these features may collect, retrieve, or transmit privacy-sensitive information to an external third party. In context, these tools increase the chance of collecting personal or regulated data and make the omission of privacy guidance more dangerous than a basic web-search skill.
The skill explicitly instructs users to enable all available tools, including crawling, people search, and autonomous research functions, rather than following least-privilege principles. This broadens accessible capabilities unnecessarily and increases exposure to privacy misuse, over-collection, and accidental invocation of higher-risk external actions.
people_search_exa - Professional profilesdeep_researcher_start/check - AI research agentEnable all tools:
mcporter config add exa-full "https://mcp.exa.ai/mcp?tools=web_search_exa,web_search_advanced_exa,get_code_context_exa,deep_search_exa,crawling_exa,company_research_exa,people_search_exa,deep_researcher_start,deep_researcher_check"
No suspicious patterns detected.