Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Perplexity Agent

Search the web using the Perplexity Agent API. Provides real-time information, news, and grounded answers with citations. Use when the user asks for: (1) Cur...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 26 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description and the included scripts/search.py align with a Perplexity API web-search wrapper. However, the registry metadata states 'Required env vars: none' while SKILL.md and the script require PERPLEXITY_API_KEY; the skill also uses the Python 'requests' library but no dependency is declared.
Instruction Scope
SKILL.md instructs the agent to run scripts/search.py with the user query and present the returned 'answer'. The script only reads PERPLEXITY_API_KEY from the environment and posts the query to https://api.perplexity.ai/v1/agent; it does not access unrelated files or other environment variables.
Install Mechanism
No install spec is provided (instruction-only), which minimizes install risk, but the Python script relies on the third-party 'requests' package. The skill does not declare this dependency or provide installation instructions, which is an operational inconsistency (not a direct security exploit, but can cause runtime issues).
!
Credentials
SKILL.md and the script require PERPLEXITY_API_KEY (appropriate and proportionate for a wrapper to Perplexity), but the package metadata advertises no required env vars or primary credential. This mismatch means an agent or installer may not surface the required API key and could lead to misconfiguration or accidental leakage if users supply credentials elsewhere.
Persistence & Privilege
The skill does not request elevated persistence (always:false) and does not modify other skills or system-wide settings. It simply calls an external API at runtime.
What to consider before installing
This skill appears to be a straightforward wrapper around Perplexity's API, but there are metadata inconsistencies you should resolve before installing. Confirm that: (1) you will provide a PERPLEXITY_API_KEY in the environment (the SKILL.md and script require it even though the registry metadata does not list it), (2) your environment has the Python 'requests' package installed or the skill declares how to install it, and (3) you're comfortable with queries and their text being sent to https://api.perplexity.ai/v1/agent (the third-party service will receive user queries and responses). Use a least-privileged API key, review your privacy policy for sending user data to external services, and consider asking the publisher to correct the manifest to explicitly declare PERPLEXITY_API_KEY as the primary credential and list dependencies.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97526ss23axm2f62swmaddaq58309x8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Perplexity Agent Search

Use the Perplexity Agent API to perform real-time web searches and get grounded answers.

Workflow

To perform a web search:

  1. Identify the user's research or search query.
  2. Execute the scripts/search.py script with the query.
  3. Present the answer from the JSON response to the user.

Example

To search for "latest AI developments": python3 scripts/search.py "What are the latest developments in AI?"

Important

  • Requires PERPLEXITY_API_KEY to be set in the environment.
  • Uses the pro-search preset for high-quality, researched results.
  • Returns a JSON object with success, answer, and the model used.

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…