← 返回 Skills 市场
tokyo-s

Exa tools

作者 Stojoc Vladimir · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
668
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install exa-skill
功能描述
Use when tasks need Exa MCP for web or people research, or when preparing Exa MCP server configuration with a fixed tool set. Trigger for requests to run Exa...
使用说明 (SKILL.md)

\r \r

Exa MCP Skill\r

\r

Workflow\r

  1. Clarify the research goal, scope, and output format.\r
  2. Select one enabled tool using the guide below: web_search_exa, web_search_advanced_exa, people_search_exa.\r
  3. Prefer the hosted Exa MCP endpoint with fixed tools in the URL query.\r
  4. Return concise findings with links and explicit unknowns.\r
  5. On rate limits (429), reduce query breadth or require an API key.\r \r

Tool Policy\r

  • Enabled now: web_search_exa, web_search_advanced_exa, people_search_exa.\r
  • Keep all other Exa tools disabled unless the user explicitly asks to expand.\r \r

Tool Selection Guide\r

  • Use web_search_exa for fast, broad discovery when the user asks general web research.\r Example intent: "Find the latest docs and announcements about X."\r
  • Use web_search_advanced_exa for precision research when you must constrain by domains, freshness, depth, or richer query controls.\r Example intent: "Search only official docs and recent sources for X."\r
  • Use people_search_exa when the task is about identifying people, roles, background, or profile-style information.\r Example intent: "Find people working on X at company Y."\r \r

Selection Rules\r

  • Start with web_search_exa when speed and coverage matter more than strict filtering.\r
  • Choose web_search_advanced_exa when web_search_exa returns noisy or insufficiently targeted results.\r
  • Choose people_search_exa only for person-centric requests, not generic topic research.\r \r

Config Reference\r

  • Read references/exa-mcp-setup.md for URL templates and generic MCP snippets.\r
安全使用建议
This skill appears to do what it says (run Exa MCP web/people searches) but has gaps you should resolve before trusting it: 1) The repo references an EXA_API_KEY but the skill metadata doesn't declare it — ask the publisher how the API key should be provided and stored. 2) The examples put the API key in the URL query string (exaApiKey=...), which risks leaking the key via logs or referrers; prefer header-based auth or a documented secure method. 3) The skill performs people-searches — consider privacy/consent and limit queries to what you are authorized to request. 4) There is no publisher homepage or provenance information; if you don't already trust mcp.exa.ai and the skill author, request more details (official docs, who maintains the endpoint). If you proceed, use a restricted API key with minimal scope, avoid reusing high-privilege credentials, and prefer that the skill declare required env vars explicitly.
功能分析
Type: OpenClaw Skill Name: exa-skill Version: 1.0.0 The skill bundle is benign. It defines an AI agent skill for Exa web and people search, clearly outlining its purpose and allowed tools in `SKILL.md`. The `references/exa-mcp-setup.md` file specifies the use of an `EXA_API_KEY` via an environment variable for communication with `https://mcp.exa.ai`, which is a standard and expected practice for API integration. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection attempts against the agent within the provided files. The instructions even include a safeguard to keep other Exa tools disabled unless explicitly requested by the user.
能力评估
Purpose & Capability
The SKILL.md and references describe using a hosted Exa MCP endpoint that requires an EXA_API_KEY, but the skill metadata does not declare any required environment variables or primary credential. That mismatch between what the skill says it needs (an API key) and what is declared is an incoherence worth flagging.
Instruction Scope
Instructions are narrowly scoped to picking one of three Exa tools and returning concise findings with links. They recommend preferring a hosted endpoint (https://mcp.exa.ai) and say to obtain an API key when rate-limited, but they do not instruct reading unrelated files or system credentials. The people-search capability can surface personal data — the instructions do not call out consent/PII handling.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes on-disk execution risk.
Credentials
The references file contains URL templates that embed ${EXA_API_KEY} in a query parameter (https://mcp.exa.ai/mcp?exaApiKey=${EXA_API_KEY}&tools=...), but requires.env is empty. Two issues: (1) the skill implicitly expects an API key but does not declare it, and (2) recommending the API key in a query string is insecure (keys in URLs can leak via logs/referrers). No other credentials are requested, which is proportionate if the EXA_API_KEY is the only missing item — but it should be declared and handled more safely.
Persistence & Privilege
always is false, the skill is user-invocable and can be called autonomously (platform default). There is no install step or config modification that would give it persistent elevated privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install exa-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /exa-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of exa-skill (version 1.0.0). - Provides guidance on using Exa MCP for web and people research tasks. - Details how to select between enabled tools: web_search_exa, web_search_advanced_exa, and people_search_exa. - Includes policies on narrowing search, rate limits, and when to enable additional tools. - Offers concise workflow and tool selection rules for efficient and targeted research.
元数据
Slug exa-skill
版本 1.0.0
许可证
累计安装 3
当前安装数 3
历史版本数 1
常见问题

Exa tools 是什么?

Use when tasks need Exa MCP for web or people research, or when preparing Exa MCP server configuration with a fixed tool set. Trigger for requests to run Exa... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 668 次。

如何安装 Exa tools?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install exa-skill」即可一键安装,无需额外配置。

Exa tools 是免费的吗?

是的,Exa tools 完全免费(开源免费),可自由下载、安装和使用。

Exa tools 支持哪些平台?

Exa tools 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Exa tools?

由 Stojoc Vladimir(@tokyo-s)开发并维护,当前版本 v1.0.0。

💬 留言讨论