perplexity-security-basics
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill mentions the
pplx-prefix for Perplexity API keys and includes placeholder strings likePERPLEXITY_API_KEY=pplx-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. These are standard documentation placeholders for illustrative purposes and do not represent leaked credentials. The instructions explicitly recommend using environment variables and.gitignoreto prevent secret exposure. - [DATA_EXPOSURE]: The skill provides a
sanitizeQueryfunction designed to prevent PII exposure by redacting emails, phone numbers, SSNs, credit card numbers, and API tokens from queries before they are sent to the Perplexity search engine. - [COMMAND_EXECUTION]: The skill includes
curlandgitcommand examples for API key validation and auditing git history for leaks. These are intended as manual developer tasks and do not involve automated or unsafe shell execution. - [REMOTE_CODE_EXECUTION]: No remote code execution or package installation patterns were detected. All external references are to official documentation or well-known services (e.g., perplexity.ai).
Audit Metadata