alterlab-perplexity
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the
litellmPython package, which is downloaded from the official Python Package Index (PyPI). This is an established library for managing multiple LLM providers. - [COMMAND_EXECUTION]: Executes local Python scripts
scripts/perplexity_search.pyandscripts/setup_env.pyto perform searches and manage environment configuration. This is the intended primary functionality of the skill. - [CREDENTIALS_UNSAFE]: Manages an
OPENROUTER_API_KEYthrough environment variables or a local.envfile. The implementation provides utilities to securely store and retrieve this key for authentication, adhering to standard secret management practices. - [INDIRECT_PROMPT_INJECTION]: As a search tool, the skill ingests content from external web sources. This ingestion surface is mitigated by the skill's architecture, which returns search results as text without granting the processed data access to sensitive system commands or file operations.
Audit Metadata