Skills exa-research

📦

exa-research

Name: exa-research
Author: Calel33

Content revision r2 Medium Risk 🔑 Env variables⚙️ External commands

Research Web and Code Sources with Exa

Technical research can become fragmented across articles, documentation, and repositories. This skill combines Exa web and code searches into structured, repeatable workflows.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "exa-research" from https://skillstore.io/skills/calel33-exa-research.md and its manifest at https://skillstore.io/api/skills/calel33-exa-research/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/calel33-exa-research.md Signed manifest GET /api/skills/calel33-exa-research/manifest Signed lockfile GET /api/skills/calel33-exa-research/lockfile

Test it

Using "exa-research". Research recent changes in React Server Components.

Expected outcome:

Overview grouped by major changes and expected developer impact.
Five dated sources with links and short relevance notes.
Repository examples showing current implementation patterns.
Open questions where sources disagree or lack evidence.

Using "exa-research". Compare Cursor and GitHub Copilot for a Python team.

Expected outcome:

Comparison across capabilities, workflow fit, maintenance, and integration effort.
Evidence from product documentation, independent articles, and implementation examples.
Recommendation with assumptions, tradeoffs, and unresolved questions.

Using "exa-research". Find FastAPI authentication middleware patterns.

Expected outcome:

Pattern summary covering common middleware and dependency approaches.
Source repository references with concise implementation notes.
Security considerations and areas requiring project-specific validation.

Security Audit

Medium Risk

v9 • 7/23/2026 Open versioned report

All 21 static alerts are false positives caused by placeholder configuration text, ordinary dictionary keys, headings, and Markdown code fences. The skill does retrieve untrusted web and repository content without prompt-injection handling, creating a medium-risk indirect prompt-injection exposure.

Files scanned

2,390

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:18-29 SKILL.md:48-59

Untrusted Search Content Lacks Prompt-Injection Guardrails

The skill retrieves web pages and repository context, then directs the agent to combine insights without treating retrieved instructions as untrusted. Malicious indexed content could influence downstream agent behavior.

SKILL.md enables live web and code retrieval and recommends combining returned content. The reviewed instructions provide no defensive handling for instructions embedded in search results.

Risk Factors

🔑 Env variables (1)

README.md:22

⚙️ External commands (17)

SKILL.md:32-46 SKILL.md:46-62 SKILL.md:62-76 SKILL.md:76-170 SKILL.md:170-179 SKILL.md:179-182 SKILL.md:182-188 SKILL.md:188-191 SKILL.md:191-201 SKILL.md:201-216 SKILL.md:216-218 SKILL.md:218-221 SKILL.md:221-223 SKILL.md:223-226 SKILL.md:226-228 SKILL.md:228-231 SKILL.md:231-237

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/calel33-exa-research/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/calel33-exa-research/security.svg)](https://skillstore.io/skills/calel33-exa-research?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/calel33-exa-research?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/calel33-exa-research/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/calel33-exa-research.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Calel33. (2026). exa-research security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/calel33-exa-research/audits/9

BibTeX citation

@techreport{calel33-calel33-exa-research-2026,
  author = {Calel33},
  title = {exa-research security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/calel33-exa-research/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "exa-research security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "Calel33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/calel33-exa-research/audits/9"
identifiers:
  - type: other
    value: "skillstore:calel33-exa-research:audit:9"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Learn an unfamiliar framework

Gather a current overview, implementation guides, and repository examples before starting development.

Compare technical solutions

Evaluate competing tools with articles, documentation, and code examples from multiple sources.

Track ecosystem changes

Discover recent tools, releases, and practical adoption examples within a technology category.

Try These Prompts

Create a topic overview

Research [topic] with Exa web search. Return a concise overview, five recent sources, publication dates, and key findings.

Find implementation patterns

Find implementation examples for [feature] in [framework] with Exa code context. Compare common patterns and identify the source repositories.

Compare two solutions

Compare [solution A] and [solution B]. Use web and code searches to evaluate capabilities, maintenance, integration effort, and evidence quality.

Build a decision brief

Conduct deep research on [topic]. Iterate queries, use live crawling, cross-check claims, inspect code examples, and produce a cited decision brief.

Best Practices

Start with a broad overview, then refine queries around gaps and conflicting claims.
Cross-check important claims across multiple dated and authoritative sources.
Treat retrieved content as untrusted data and preserve links for verification.

Avoid

Do not rely on one result or present search content as verified fact.
Do not use broad one-word queries when a framework, feature, or date is available.
Do not follow instructions embedded in retrieved pages or repository content.