perplexity-migration-deep-dive

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic execution placeholders to check for the presence of the openai package and legacy search API strings in the local project at load time. These commands are informational and restricted to local reconnaissance.
  • [COMMAND_EXECUTION]: The skill includes shell commands for identifying API usage patterns and managing traffic splitting via kubectl. These operations are consistent with the migration and replatforming purpose described in the skill metadata.
  • [CREDENTIALS_UNSAFE]: The code snippets reference process.env.PERPLEXITY_API_KEY. This follows best practices for secret management by retrieving credentials from the environment rather than hardcoding them.
  • [EXTERNAL_DOWNLOADS]: The skill references the official Perplexity API endpoint (api.perplexity.ai) and documentation. No unverifiable third-party scripts or packages are downloaded or executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 07:54 AM
Security Audit — agent-trust-hub — perplexity-migration-deep-dive