exa-search-2af5a7 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited exa-search-2af5a7 (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use Exa as an API-backed web_search provider when ArkSpace routes a semantic or technical discovery task to Exa, or when the user explicitly asks for Exa search.
Exa configuration is managed by provider-manager; do not ask the user to edit config files by hand.
https://exa.ai/docs/reference/searchhttps://exa.ai/docs/reference/get-contentshttps://exa.ai/docs/reference/find-similar-linkshttps://exa.ai/docs/reference/answerhttps://docs.openclaw.ai/tools/exa-searchResolve the installed ArkSpace package root before running commands. Replace <installed-arkspace-path> with the directory two levels above this loaded SKILL.md, such as /Users/<user>/.claude/plugins/cache/ark-space/ark-space/0.1.2. Use the installed package path, not a repository-relative command.
Check configuration:
python3 <installed-arkspace-path>/scripts/arkspace.py provider check exa --capability web_searchSet up Exa once:
python3 <installed-arkspace-path>/scripts/arkspace.py provider setup exa --wizardFor multiple API keys:
python3 <installed-arkspace-path>/scripts/arkspace.py provider setup exa --wizard --key-count 2If the provider check reports a missing Exa API key:
python3 <installed-arkspace-path>/scripts/arkspace.py provider setup exa --wizard.--wizard through that tool.! python3 <installed-arkspace-path>/scripts/arkspace.py provider setup exa --wizard in the Claude prompt or terminal, orpython3 <installed-arkspace-path>/scripts/arkspace.py provider setup exa --save-secret EXA_API_KEY --secret-stdin./ark-space:exa-search <query>.Basic semantic search:
python3 <installed-arkspace-path>/scripts/arkspace.py web search --provider exa "agent skills frameworks" --output jsonSearch with domain filters and content extraction:
python3 <installed-arkspace-path>/scripts/arkspace.py web search --provider exa "Claude Code plugin docs" \
--include-domains docs.anthropic.com,github.com \
--search-type neural \
--include-highlights \
--max-results 5 \
--output jsonDeep search with structured output:
python3 <installed-arkspace-path>/scripts/arkspace.py web search --provider exa "top open-source agent skill systems" \
--search-type deep-reasoning \
--output-schema '{"type":"object","properties":{"projects":{"type":"array"}}}' \
--output jsonDeep search with related query expansion:
python3 <installed-arkspace-path>/scripts/arkspace.py web search --provider exa "open-source agent skill systems" \
--search-type deep-reasoning \
--additional-queries "Claude Code skills,Codex plugins,agent workflow repositories" \
--include-summary \
--output jsonexa-similar instead when the user starts from a known URL and wants similar pages, comparable products, adjacent papers, or related repositories.exa-context instead when a code role needs ready-to-use examples, API syntax, or framework usage context rather than source URLs.exa-contents after Exa search when selected URLs need full text.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.