Code Docs Search by Exa

staleAudited by VirusTotal on May 13, 2026.

Overview

No VirusTotal analysis has been recorded yet. File reputation checks will appear here once the artifact hash has been scanned.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Search queries, including any private code names or details the user includes, may be transmitted to Exa's MCP service.

Why it was flagged

The skill relies on an external MCP service. This is disclosed and central to the skill's purpose, but it means user queries are sent outside the local environment.

Skill content
Connect MCP server:
`https://mcp.exa.ai/mcp`
Recommendation

Avoid putting secrets, private source code, credentials, or sensitive business details into search queries unless sharing them with the external provider is acceptable.

What this means

The agent may rely on third-party code examples or documentation that should not be treated as automatically safe or correct.

Why it was flagged

The skill intentionally brings external code and documentation into the agent's context. This is purpose-aligned, but externally sourced snippets can be incomplete, outdated, or misleading.

Skill content
Finds real code snippets and docs from GitHub, docs sites, and Stack Overflow.
Recommendation

Review returned code before using it, verify versions, and avoid blindly applying snippets to production or security-sensitive projects.