perplexity-2

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's scripts/search.sh explicitly calls Perplexity's web-search API (https://api.perplexity.ai/chat/completions) and prints the API's returned content and citations (as described in SKILL.md), meaning untrusted public web content is ingested and presented as part of the agent's workflow and could influence subsequent outputs.