perplexity-deploy-integration

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_SAFE]: The skill demonstrates best practices for secret management, utilizing platform-specific tools like vercel env and gcloud secrets to handle the PERPLEXITY_API_KEY rather than hardcoding sensitive data.
  • [INDIRECT_PROMPT_INJECTION]: The provided code templates create API endpoints that ingest untrusted user input via the query parameter and pass it to the Perplexity Sonar API. This represents a standard integration surface for LLM-powered applications.
  • Ingestion points: req.json() in api/search.ts and req.body in server.ts (SKILL.md).
  • Boundary markers: Absent in the simplified code templates.
  • Capability inventory: The skill uses Bash tools for production deployments to Vercel and Google Cloud Run.
  • Sanitization: No specific input sanitization is implemented in the provided examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 09:39 PM
Security Audit — agent-trust-hub — perplexity-deploy-integration