Code Docs Search by Exa

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only skill for searching public code documentation through Exa; it has no local code or credential requirements, but users should remember that search queries go to an external MCP service and returned snippets may be untrusted.

This skill appears safe to install for its stated purpose. Use it for public documentation and code examples, but do not include secrets or sensitive private code in queries, and verify any returned snippets before using them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Search queries, including any private code names or details the user includes, may be transmitted to Exa's MCP service.

Why it was flagged

The skill relies on an external MCP service. This is disclosed and central to the skill's purpose, but it means user queries are sent outside the local environment.

Skill content
Connect MCP server:
`https://mcp.exa.ai/mcp`
Recommendation

Avoid putting secrets, private source code, credentials, or sensitive business details into search queries unless sharing them with the external provider is acceptable.

What this means

The agent may rely on third-party code examples or documentation that should not be treated as automatically safe or correct.

Why it was flagged

The skill intentionally brings external code and documentation into the agent's context. This is purpose-aligned, but externally sourced snippets can be incomplete, outdated, or misleading.

Skill content
Finds real code snippets and docs from GitHub, docs sites, and Stack Overflow.
Recommendation

Review returned code before using it, verify versions, and avoid blindly applying snippets to production or security-sensitive projects.