Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Perplexity web-search helper that sends the user's query to Perplexity using a disclosed API key requirement.
Install only if you are comfortable providing a Perplexity API key and having search queries sent to Perplexity. Avoid using it for private or sensitive queries unless that fits your data-sharing expectations for the provider.
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
}
try:
response = requests.post(url, headers=headers, json=payload)
response.raise_for_status()
data = response.json()
The skill instructs execution of a local Python script that uses both network access and an environment-provided API key, but it does not declare any explicit tool scope such as allowed-tools or permissions. This creates an authorization and review gap: an agent may invoke code, read sensitive environment data, and make outbound requests without the skill manifest clearly constraining or disclosing those capabilities.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print(json.dumps({"success": False, "error": "PERPLEXITY_API_KEY environment variable not set"}))
return
url = "https://api.perplexity.ai/v1/agent"
headers = {
"Authorization": f"Bearer {api_key}",
"Content-Type": "application/json"
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
}
try:
response = requests.post(url, headers=headers, json=payload)
response.raise_for_status()
data = response.json()
No suspicious patterns detected.