parallel

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core research behavior broadly matches the stated purpose, and the main SDK path appears consistent with Parallel.ai. However, the skill is distributed from a personal repo, supports arbitrary outbound webhooks, and explicitly forwards an optional third-party API key and browsing data through Parallel.ai to browser-use.com. Those data flows are disclosed but still disproportionate enough to warrant medium risk rather than benign.

Confidence: 89%Severity: 63%
Audit Metadata
Analyzed At
Mar 20, 2026, 02:26 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fclawdbot-skill-parallel%2Fparallel%2F@acf4f9997eda895028df68c2e9b9f3c25e3116c4
Security Audit — socket — parallel