alterlab-parallel-web
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
scripts/parallel_web.pyscript via the Bash tool to perform web search and content extraction operations. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
openaiandparallel-webPython packages from standard registries to interact with the target APIs. - [SAFE]: The skill implements secure secret management by utilizing the
PARALLEL_API_KEYenvironment variable instead of hardcoded credentials. - [SAFE]: The instructions mandate saving all external data results to a dedicated
sources/folder, which promotes transparency, auditability, and context management. - [SAFE]: The skill ingests untrusted data from the web (search results and URL content). While this represents a surface for indirect prompt injection, it is the intended primary purpose of the skill and follows standard practices for search-enabled AI agents.
Audit Metadata