parallel-data-enrichment
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executeparallel-clicommands. These commands handle metadata suggestions (enrich suggest), task initiation (enrich run), and status polling (enrich poll). - [EXTERNAL_DOWNLOADS]: Mentions the
parallel-web-toolspackage (installable viapipx). This is identified as a legitimate resource belonging to the skill's vendor ('parallel'). - [DATA_EXFILTRATION]: Data provided by the user (either inline or via CSV) is sent to the vendor's service via
parallel-clifor processing. This network activity is documented and aligns with the primary purpose of data enrichment. - [PROMPT_INJECTION]: The skill processes untrusted user input from command-line arguments and CSV files which are interpolated into tool commands.
- Ingestion points: The
$ARGUMENTSvariable and source CSV files defined inSKILL.md. - Boundary markers: Instructions do not specify the use of delimiters or boundary markers to isolate untrusted data from the command context.
- Capability inventory: The skill uses the
Bashtool for shell execution, has file-writing capabilities (to/tmp), and performs network operations (viaparallel-cli). - Sanitization: Input data is interpolated directly into command flags without explicit sanitization or validation steps provided in the instructions.
Audit Metadata