Parallel 1.0.1
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill matches its web-search purpose, but it embeds an undeclared Parallel.ai API key that may route searches through an unknown account.
Use caution before installing. The search functionality is consistent with the description, but you should prefer configuring your own PARALLEL_API_KEY and avoid relying on the embedded key. Also review the unpinned Python dependency before installing it.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your searches could be made under an unknown Parallel.ai account, affecting billing, audit logs, rate limits, and who may be able to view query history.
The script uses an embedded API key as the default credential when the user has not configured PARALLEL_API_KEY, while the registry metadata declares no primary credential or required environment variable.
API_KEY = os.environ.get("PARALLEL_API_KEY", "y2s_...q_jg1")Remove the embedded key, require users to provide their own PARALLEL_API_KEY, and declare that credential requirement in the skill metadata.
Installing the dependency will trust the current package published under that name at install time.
The setup instructions install an unpinned Python package. This is expected for an SDK-based search integration, but the artifact does not pin a version or provide a lockfile.
pip install parallel-web
Install from a trusted Python package index, consider pinning a known-good version, and verify the package before use.