Erdmannsilva Perplexity
PassAudited by ClawScan on May 12, 2026.
Overview
This skill appears to do what it claims: send user-provided search queries to Perplexity using a required API key and return results.
This skill looks proportionate for Perplexity search. Before installing, make sure you trust the publisher, provide only the needed PERPLEXITY_API_KEY, and avoid sending confidential information in search queries.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your Perplexity API key will be used when the skill runs, and usage may count against your Perplexity account or billing.
The skill needs a Perplexity API credential to operate. This is expected for the stated Perplexity API search purpose, and the provided code uses it only as a Bearer token to the Perplexity API.
Requires `PERPLEXITY_API_KEY` environment variable
Use a dedicated API key if possible, avoid sharing it in prompts, and revoke or rotate it if you no longer use the skill.
Any sensitive information included in a search query may be transmitted to Perplexity.
The script sends the supplied search queries to Perplexity's external API. This is purpose-aligned and disclosed, but users should understand that query text leaves the local environment.
fetch("https://api.perplexity.ai/search", { ... body: JSON.stringify({ query: queries }) })Do not include secrets, private personal data, or confidential business information in queries unless you are comfortable sending it to Perplexity under its terms and privacy policy.
The package identity metadata is not fully consistent, which may make it harder to confirm the exact publisher lineage.
The internal metadata owner and slug differ from the registry metadata shown for this review, which lists a different owner ID and slug. This does not show malicious behavior, but it is a provenance inconsistency.
"ownerId": "kn7evq0dm74etz8yf5w8513q8x7ys8hs", "slug": "perplexity"
Verify the publisher/source before installing if provenance matters to you, especially before providing an API key.