perplexity
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto orchestrate between its Python and Node.js components, specifically callingscripts/chrome-token.mjsto handle browser-based authentication. - [EXTERNAL_DOWNLOADS]: Declares dependencies on external packages
@rezkam/browser-tools(from the NPM registry) andperplexity-webui-scraper(from PyPI) to provide browser automation and API scraping capabilities. - [PROMPT_INJECTION]: As the skill ingests and summarizes web search results and LLM outputs from Perplexity, it maintains an indirect prompt injection surface where content from external websites could attempt to influence the agent's instructions.
- [DATA_EXFILTRATION]: The skill extracts the
__Secure-next-auth.session-tokencookie from the user's local Chrome profile. This is the primary and documented authentication method used to authorize requests sent toperplexity.ai.
Audit Metadata