parallel-cli
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents multiple installation methods from standard, well-known registries including npm (
parallel-web-cli), PyPI (parallel-web-tools), and Homebrew (parallel-web/tap/parallel-cli). These are typical distribution channels for software developers. - [REMOTE_CODE_EXECUTION]: The skill includes a standalone installer command:
curl -fsSL https://parallel.ai/install.sh | bash. While this pattern downloads and executes code from a remote server, it is a common practice for CLI tool installation from a specific service's domain (parallel.ai). The behavior is transparent and consistent with the skill's documented purpose. - [COMMAND_EXECUTION]: The skill defines a large surface area for executing the
parallel-clitool. These commands are non-interactive, use structured JSON output, and are intended for research, web extraction, and monitoring tasks. No evidence of shell injection or malicious command construction was found.
Audit Metadata