web-search-perplexity

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime calls Perplexity’s /chat/completions and /search endpoints with user-provided queries/messages, and Perplexity may fetch and extract readable web page text from public URLs, which is then included in the model context—an outsider-authored source.