parallel-data-enrichment
Warn
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell templates that interpolate variables such as $ARGUMENTS, $INTERACTION_ID, and $TASKGROUP_ID. Without proper escaping or validation, malicious strings provided in these variables could lead to command injection. The skill depends on the parallel-cli binary for its core functionality.\n- [DATA_EXFILTRATION]: User-provided data from local CSV files or JSON strings is sent to an external service for enrichment. This constitutes a data transfer to the parallel-web infrastructure, which is the primary purpose of the skill but involves handling potentially sensitive information.\n- [PROMPT_INJECTION]: Indirect Prompt Injection Surface Detected.\n
- Ingestion points: Data is ingested from CSV files (--source) or inline JSON (--data) defined in SKILL.md.\n
- Boundary markers: Absent. The instructions do not specify the use of delimiters or provide directions to ignore instructions embedded within the source data.\n
- Capability inventory: The skill can execute shell commands, write to the filesystem, and perform network requests via the parallel-cli tool.\n
- Sanitization: Absent. No validation or filtering is applied to the input data before processing.\n- [EXTERNAL_DOWNLOADS]: The skill references the parallel-cli tool and the parallel-web-tools Python package. These are recognized as resources belonging to the vendor (parallel-web).
Audit Metadata