exa-enterprise-rbac
Enables configuration of SSO and role-based access control for Exa, enhancing security and organization management.
Install this skill
Security score
The exa-enterprise-rbac skill was audited on May 24, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 61 | if (!client) throw new Error(`No Exa client for use case: ${useCase}`); |
Template literal with variable interpolation in command context
| 115 | return { allowed: false, reason: `Search type ${searchType} not allowed for ${role}` }; |
Template literal with variable interpolation in command context
| 118 | return { allowed: false, reason: `Max ${perms.maxResults} results for ${role}` }; |
Template literal with variable interpolation in command context
| 121 | return { allowed: false, reason: `Category ${category} not allowed for ${role}` }; |
Template literal with variable interpolation in command context
| 139 | if (!perms) throw new Error(`Unknown role: ${role}`); |
Template literal with variable interpolation in command context
| 168 | if (!perms) throw new Error(`Unknown role: ${role}`); |
Template literal with variable interpolation in command context
| 180 | `Daily search limit (${perms.dailySearchLimit}) exceeded for ${role}` |
Access to .env file
| 48 | ragPipeline: new Exa(process.env.EXA_KEY_RAG!), |
Access to .env file
| 51 | researchTool: new Exa(process.env.EXA_KEY_RESEARCH!), |
Access to .env file
| 54 | customerSearch: new Exa(process.env.EXA_KEY_CUSTOMER!), |
External URL reference
| 208 | -X POST https://api.exa.ai/search \ |
External URL reference
| 230 | - [Exa Dashboard](https://dashboard.exa.ai) |