parallel-web-search

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill aligns with its stated purpose of performing web searches via a parallel CLI and producing structured, cited outputs. However, there are notable security concerns primarily around the installation method (curl | bash) and potential credential handling (API key exposure). The core functionality (web search, parsing, and citation) is coherent with the described usage, but the installation flow introduces supply-chain risk that elevates the overall risk score. Treat the installation approach as a primary risk vector and ensure proper verification of the installer URL and checksum, and implement secret management safeguards for any API keys used.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Mar 11, 2026, 10:43 PM
Package URL
pkg:socket/skills-sh/parallel-web%2Fparallel-agent-skills%2Fparallel-web-search%2F@cf69b481deb88f58cfb6a0794fbdb012b1243c48