perplexity-search
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses environment variables for secure API key management, supported by a dedicated setup script (
scripts/setup_env.py) and a.env.exampletemplate. It also provides documentation on excluding sensitive files from version control using.gitignore.\n- [SAFE]: External dependencies are restricted to reputable, well-known packages such aslitellmandpython-dotenv. All network communication is directed to legitimate services (OpenRouter and Perplexity).\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a standard attack surface for indirect prompt injection due to its core function of retrieving external web content.\n - Ingestion points: Real-time web search results are ingested via the
completionfunction inscripts/perplexity_search.pythrough the Perplexity API.\n - Boundary markers: The script returns search results as plain text strings without implementing specific delimiters to segregate potentially untrusted web content from agent instructions.\n
- Capability inventory: The skill is capable of performing network requests and writing search results to the local filesystem if the
--outputparameter is specified.\n - Sanitization: There is no explicit sanitization or filtering of the content returned by the search API, as it is intended for research and informational purposes.
Audit Metadata