Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward AIsa Perplexity Sonar client that sends user-provided research prompts to the documented remote API using an API key.
Install only if you intend to use AIsa's Perplexity Sonar service. Treat prompts, optional system instructions, and the AISA_API_KEY as sensitive: avoid sending confidential, regulated, or private material unless you are comfortable sharing it with that provider.
The skill requires environment access to AISA_API_KEY and performs outbound network requests, but it does not declare an explicit tool scope such as permissions or allowed-tools. That omission weakens least-privilege controls and makes it harder for a host agent or reviewer to constrain execution to only the intended capabilities.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
--system "Respond in markdown with an executive summary first."
## Curl Examples
### Sonar
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
class PerplexitySearchClient:
"""Minimal client for AIsa Perplexity Sonar endpoints."""
BASE_URL = "https://api.aisa.one/apis/v1"
def __init__(self, api_key: Optional[str] = None):
self.api_key = api_key or os.environ.get("AISA_API_KEY")
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
class PerplexitySearchClient:
"""Minimal client for AIsa Perplexity Sonar endpoints."""
BASE_URL = "https://api.aisa.one/apis/v1"
def __init__(self, api_key: Optional[str] = None):
self.api_key = api_key or os.environ.get("AISA_API_KEY")
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
class PerplexitySearchClient:
"""Minimal client for AIsa Perplexity Sonar endpoints."""
BASE_URL = "https://api.aisa.one/apis/v1"
def __init__(self, api_key: Optional[str] = None):
self.api_key = api_key or os.environ.get("AISA_API_KEY")
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
class PerplexitySearchClient:
"""Minimal client for AIsa Perplexity Sonar endpoints."""
BASE_URL = "https://api.aisa.one/apis/v1"
def __init__(self, api_key: Optional[str] = None):
self.api_key = api_key or os.environ.get("AISA_API_KEY")
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
class PerplexitySearchClient:
"""Minimal client for AIsa Perplexity Sonar endpoints."""
BASE_URL = "https://api.aisa.one/apis/v1"
def __init__(self, api_key: Optional[str] = None):
self.api_key = api_key or os.environ.get("AISA_API_KEY")
This code packages the user query and optional system instruction into a request body and sends them to a remote HTTPS endpoint. Although the file has a general docstring describing it as a client, it does not include any explicit user-facing warning, prompt, or disclosure that supplied content will be transmitted to an external service.
No suspicious patterns detected.