Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Parallel API enrichment guide, but users should be careful about sending private CSV data to an external service.
Install only if you intend to use Parallel for external data enrichment. Do not submit secrets, credentials, regulated personal data, or confidential datasets unless your policies allow Parallel processing, and choose output paths whose files you are comfortable retaining locally.
The skill encourages users to submit CSVs or inline records to a third-party enrichment service and writes results to disk, but the description does not clearly warn about that data flow. This can cause users to unintentionally disclose sensitive or regulated data externally and leave enriched outputs on local storage where they may be mishandled.
The trigger guidance is broad enough to match common requests like research, CSV handling, and contact lookups, which increases the chance the skill is invoked by default even when the user did not intend to use an external enrichment provider. In this skill's context, over-invocation is more dangerous because the action sends user-supplied datasets to a third-party service and persists output files, amplifying privacy and data-handling risks.
No suspicious patterns detected.
