perplexity
Warn
Audited by Snyk on Apr 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md shows the Perplexity API performing web searches and synthesizing content from arbitrary public webpages (via the chat/completions and search endpoints like "https://api.perplexity.ai/chat/completions" and "/search"), returning citations/snippets from open web sources—which the agent is expected to read and use to form answers—so untrusted third‑party content can influence behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata