Parallel

• Analyzed: May 12, 2026, 3:04 AM
• Findings: 1
• Version: 1.2.1
• Hash: fc2c9ac41302cf738b7c0b2dd47261ebb2e09f3dc9ee6ab4c35dff7c5e9e89c1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a functional interface for the Parallel.ai API but contains a hardcoded API key in `scripts/search.py`, which is a significant security vulnerability and credential leak. Additionally, `scripts/task.py` includes support for authenticated web browsing via a third-party service (browser-use.com), a high-privilege capability that increases the potential impact of misuse, although it is documented as a feature for deep research.