pp-parallel
Warn
Audited by Socket on Aug 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's research purpose partly matches its API usage, but it routes sensitive Parallel credentials and account actions through a third-party wrapper CLI instead of Parallel's official CLI, adds arbitrary webhook output delivery, and can install/register extra executables. This is not confirmed malware, but the install trust, credential forwarding, and exfiltration surface are too broad for a simple research helper.
Confidence: 88%Severity: 84%
Audit Metadata