Perplexity Search

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

The skill can make AIsa API calls under your account credential, which may affect account usage or quota.

Why it was flagged

The client reads an AIsa API key from the environment and uses it as a bearer token for the intended API requests.

Skill content

self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"

Recommendation

Use a dedicated or least-privileged AIsa key if available, keep it out of logs, and monitor API usage.

NoteHigh Confidence

ASI07: Insecure Inter-Agent Communication

What this means

Anything included in the search query may be shared with the external AIsa/Perplexity service.

Why it was flagged

The user query and any optional system instruction are packaged as messages and sent to the external AIsa API.

Skill content

BASE_URL = "https://api.aisa.one/apis/v1" ... body = {"model": model, "messages": messages}

Recommendation

Avoid sending secrets, private documents, or sensitive personal data in queries unless you are comfortable with the provider handling that content.