Back to skill
Skillv1.0.0
VirusTotal security
Exa tools · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 4:21 AM
- Hash
- 4fe1e3ccb67b5018516669b3b01fa56dfc414b00d8692ba50c0ec51cf6cfbf1c
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: exa-skill Version: 1.0.0 The skill bundle is benign. It defines an AI agent skill for Exa web and people search, clearly outlining its purpose and allowed tools in `SKILL.md`. The `references/exa-mcp-setup.md` file specifies the use of an `EXA_API_KEY` via an environment variable for communication with `https://mcp.exa.ai`, which is a standard and expected practice for API integration. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection attempts against the agent within the provided files. The instructions even include a safeguard to keep other Exa tools disabled unless explicitly requested by the user.
- External report
- View on VirusTotal
