perplexity
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly calls the Perplexity API for "web-grounded AI search" and examples (scripts/perplexity_search.sh) show it fetching and synthesizing real-time web sources and citations, which are untrusted third‑party web content that the agent reads and uses to drive multi-step reasoning.
Audit Metadata