Parallel 1.0.1

• Analyzed: May 12, 2026, 3:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 8331ef46fc63098966d6ded08210f6856d3dda3316a13afaed67e576c79db2d2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides wrappers for the Parallel.ai API for web search and research, as stated in the `SKILL.md` description. The `SKILL.md` contains no prompt injection attempts. Both `scripts/parallel.sh` and `scripts/search.py` interact solely with the `api.parallel.ai` endpoint, using a default API key (which can be overridden by an environment variable) and passing user input as data within JSON payloads, preventing command injection. There is no evidence of data exfiltration, persistence mechanisms, or other malicious activities.