perplexity-search

SUSPICIOUS: The skill is broadly coherent with its stated purpose and uses official OpenRouter/LiteLLM channels, so it is not fundamentally malicious. Risk comes from unpinned package installs and telling users to pass the API key on the command line, plus reliance on OpenRouter as an intermediary credential holder; this is proportionate but not low-risk.