perplexity-load-scale

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow posts user-selected/random “query” strings as the messages[].content to Perplexity’s Sonar chat completions endpoint (https://api.perplexity.ai/chat/completions), so outsider-authored free text can be ingested as prompt content at request time.