parallel-monitor
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill suggests users upgrade the 'parallel-web-tools' package via pipx or use 'parallel-cli update' if commands are missing, which are vendor-provided resources.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingest and processes untrusted data from external websites.
- Ingestion points: Data enters the context when the agent retrieves monitor events or event groups via 'parallel-cli monitor events' and 'parallel-cli monitor event-group' as described in SKILL.md.
- Boundary markers: The instructions do not specify any delimiters or ignore-instructions for the external content retrieved from the web.
- Capability inventory: The skill uses bash commands via 'parallel-cli' to create, list, update, and delete monitors (SKILL.md).
- Sanitization: There is no explicit sanitization or validation logic defined for the content fetched from the web before it is processed by the agent.
Audit Metadata