pplx-cli

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and API/data flow are largely consistent with a legitimate Perplexity CLI integration, but the install path relies on a pipe-to-shell GitHub Releases installer and a self-updating external binary whose exact official documentation and verification trail were not fully confirmed from the provided evidence. Risk is driven more by install trust and credential forwarding to a downloaded CLI than by malicious behavior.

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
Aug 1, 2026, 11:32 PM
Package URL
pkg:socket/skills-sh/perplexityai%2Fapi-platform-developers%2Fpplx-cli%2F@fabf91857d85a6b8319e74d1d0fb32372b78b2adfaa8daf81b22e42a1cd5fe71