web-search-perplexity

SUSPICIOUS. The skill’s purpose broadly matches web search/chat, but its actual data flow is through a Gooseworks/Orthogonal proxy rather than direct Perplexity endpoints, and it instructs the agent to read raw local credentials and an overrideable API base from disk. The npm-based Gooseworks CLI path appears same-org and documented, which lowers supply-chain concern, but the proxy architecture and credential-file handling make the skill medium risk.