ClawHub
Back to skill

Security audit

perplexity-downloader

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent Perplexity archive tool, but its full-history mode can collect and save a large amount of private conversation data with limited privacy warning or scoping.

Install only if you are comfortable with an agent helping collect and save Perplexity conversation history to local Markdown files. Prefer using explicit thread URLs or a limited URL list; avoid pasting a full logged-in page unless you understand it may reveal private history metadata or page content. Store or delete the exported files carefully because they may contain sensitive prompts, answers, and links.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
77% confidence
Finding
The trigger text includes broad phrasing such as 'any request to capture Perplexity conversations,' which can cause the skill to activate in situations the user did not intend. While not directly exploitable as code execution, unintended activation increases the chance of exporting or saving sensitive conversation data without sufficiently explicit user confirmation.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The full-history export flow instructs the user to export and save all Perplexity threads locally, but it does not prominently warn that these files may contain sensitive prompts, answers, links, or personal information. This creates a real privacy risk because users may unknowingly persist large amounts of sensitive history to disk in a predictable location.

Context Leakage

High
Category
Data Exfiltration
Content
1. **Get History Page** → Ask user to do one of:
   - Visit `https://www.perplexity.ai/` (logged in), scroll history sidebar to load all threads, copy/paste the page
   - Or provide the URL to their Perplexity home page
2. **Extract Thread URLs** → Parse the content for all thread URLs (pattern: `https://perplexity.ai/search/...`)
   - Deduplicate
   - Report count: *"Found 42 threads in your history"*
3. **Download Each Thread Sequentially** → Loop through each URL:
Confidence
95% confidence
Finding
Extract Thread

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.