Security audit
OpenClaw Exa Plugin
Security checks for vulnerabilities and agentic risk
Overview
This package coherently adds an Exa web search provider and only uses the expected API key and network access needed for that function.
Install this only if you intend to use Exa for web search. Search queries and configured content options are sent to the Exa endpoint, and the Exa API key is used for authentication; avoid setting a custom base URL unless you control or trust it.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.