Perplexity Sonar Search
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward AIsa/Perplexity search skill that uses an API key and sends your prompts to AIsa, with no hidden or destructive behavior shown.
This skill looks purpose-aligned for AIsa/Perplexity search. Before installing, make sure you trust the publisher, use a revocable API key, and avoid sending sensitive information in search prompts unless that is acceptable for your use case.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use the configured AIsa account/key for search requests, which may have billing or account-access implications.
The client reads an AIsa API key from the environment and uses it as a bearer token for the provider request.
self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"Use a scoped and revocable AIsa key if available, and only install the skill if you trust it to use that key for Perplexity search requests.
Search questions and any information included in them leave the local environment and are sent to AIsa/Perplexity-backed endpoints.
The script packages the user query, and optionally a system message, and posts it to the external AIsa API.
BASE_URL = "https://api.aisa.one/apis/v1" ... messages.append({"role": "user", "content": query})Avoid including secrets, private documents, or sensitive personal data in prompts unless you are comfortable sending them to the provider.
It may be harder to independently verify the publisher history or upstream source of the skill.
The registry metadata does not provide a source repository or provenance location, even though the bundled code is present for review.
Source: unknown
Review the bundled script and publisher identity before installing, especially because the skill uses an API key.