pp-parallel

Warn

Audited by Socket on Aug 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's research purpose partly matches its API usage, but it routes sensitive Parallel credentials and account actions through a third-party wrapper CLI instead of Parallel's official CLI, adds arbitrary webhook output delivery, and can install/register extra executables. This is not confirmed malware, but the install trust, credential forwarding, and exfiltration surface are too broad for a simple research helper.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
Aug 2, 2026, 08:51 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-parallel%2F@31b3c215305ae15a5981f3837e55caeaa31ad564c3067d87929f2974b8fa81be
Security Audit — socket — pp-parallel