Websearch To Exa

Mods integrations 18 Scanned by NVIDIA SkillSpector

Install Command

npx claude-code-templates@latest --mod integrations/websearch-to-exa

View on GitHub

claude-code — websearch-to-exa

Scanned by NVIDIA SkillSpector

Automated static analysis (no LLM) · v2.12.0 · 2026-10-17

Partial analysis: some checks could not run on this component.

6 observations

scanner score 54/100

SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.

Agent Config Directory Access
Agent Snooping · README.md:21
MCP server referenced without pinned version: 'npx claude-code-templates'.
MCP Rug Pull · README.md:30
Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: network.
MCP Least Privilege · SKILL.md:1
Shadow Command Trigger
Trigger Abuse · SKILL.md:1
External Transmission ×2
Data Exfiltration · hooks/websearch-to-exa.ts:39

Learn more about NVIDIA SkillSpector.

Content

Claude Mod. A mod is a complete Claude Code plugin built on function hooks (Anthropic's mods/ layout); it is on by default in Claude Code 2.1.287+. Hooks module: hooks/websearch-to-exa.ts. Options: exaApiKey, numResults, type (set in user or managed settings pluginConfigs, or /config). Run claude plugin validate on the installed folder to see every event it hooks and every $ call it makes.

websearch-to-exa

Overrides the built-in WebSearch tool and routes the query to the Exa search API through $.http.fetch. On success the hook answers { result } in WebSearch's own output shape without calling next (the built-in search never runs); with no key configured, or when Exa fails, it falls back to the built-in search.

The API key comes from the plugin's options (userConfig "exaApiKey"). Never hardcode it in this file.

Options

  exaApiKey:  string   Exa API key (required to activate)
  numResults: number   results per query (default 8)
  type:       string   "auto" | "neural" | "keyword" (default "auto")

Declared in .claude-plugin/plugin.json (userConfig). Set them in /config, in user settings (~/.claude/settings.json, not project settings), with --settings <file> or in managed settings:

json

{ "pluginConfigs": { "websearch-to-exa@skills-dir": { "options": { } } } }

Install

npx claude-code-templates@latest --mod integrations/websearch-to-exa
claude

It is written to .claude/skills/websearch-to-exa/, which Claude Code auto-loads as websearch-to-exa@skills-dir. For one session with hot reload: claude --plugin-dir .claude/skills/websearch-to-exa. claude plugin validate .claude/skills/websearch-to-exa prints every event it hooks and every $ call it makes.

Requirements. Mods are on by default in Claude Code 2.1.287+. Typed against Anthropic's declarations: https://github.com/anthropics/claude-code/tree/main/mods