perplexity-search
Audited by Socket on Feb 16, 2026
1 alert found:
Malware[Skill Scanner] Instruction directing agent to run/execute external content Benign in intent and documentation: the fragment describes a legitimate skill for web search and research using an external API. There is no hardcoded credential, no obfuscated or malicious code, and the described data flow (user input to external API to user-visible results) matches the stated purpose. However, the snippet is incomplete (truncated end) and provides limited implementation details such as error handling, input validation, and security controls. A developer should ensure proper credential handling, input sanitization, explicit network and data privacy controls, and complete implementation before shipping.