← Back to Skills Marketplace
Parallel AI Skill
by
joelchance
· GitHub ↗
· v1.0.1
631
Downloads
4
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install parallel-ai
Description
High-accuracy web search and research via Parallel.ai API. Optimized for AI agents with rich excerpts and citations.
Usage Guidance
Do not install or run this skill blindly. Before using it: 1) Treat the hard-coded API key as suspicious — do not rely on it; prefer to set your own PARALLEL_API_KEY and remove/replace any hard-coded defaults. 2) Verify provenance — the source and homepage are unknown. Ask the publisher for official docs or an official package. 3) Expect the scripts to call external APIs (api.parallel.ai, api.browser-use.com) and to allow sending data to webhooks you supply — never provide webhooks or browser-use credentials that accept arbitrary sensitive data. 4) Ensure required local tools (curl, jq, python dependencies) are present. 5) If you already ran these scripts with your credentials, consider rotating those API keys. 6) If you need this capability but want lower risk, request an official SDK/package from the Parallel.ai vendor or use a vetted connector rather than an unknown third-party bundle.
Capability Analysis
Type: OpenClaw Skill
Name: parallel-ai
Version: 1.0.1
The skill is classified as suspicious due to two significant vulnerabilities. The `scripts/parallel.sh` file contains a shell injection vulnerability where user input is directly embedded into a `curl -d` command without proper sanitization, potentially allowing arbitrary command execution. Additionally, `scripts/search.py` includes a hardcoded API key as a fallback value (`y2s_m4er5i6-5qCikOLUtmnkvOYRU24eDphq_jg1`), which is a critical security flaw exposing a secret. While these are serious flaws, they do not demonstrate intentional malicious design by the skill itself, but rather vulnerabilities that could be exploited.
Capability Assessment
Purpose & Capability
Name/description align with the included scripts (search, extract, task, monitor, findall). However the registry metadata declares no required env vars or binaries while almost every script requires PARALLEL_API_KEY (and some optionally BROWSERUSE_API_KEY). The shell script also uses curl/jq but the skill metadata does not list required binaries.
Instruction Scope
Runtime instructions and scripts stay within the stated goal of interacting with Parallel.ai (search, extraction, tasks, monitors). They do not attempt to read unrelated local files or secrets, but they do allow sending data to arbitrary webhook URLs (monitor.create) and can be configured to use third-party authenticated browsing (browser-use.com). Those features are plausible for a monitoring/research tool but expand the blast radius and require care when supplying webhook URLs or browser-use credentials.
Install Mechanism
No install spec is provided (instruction-only/inline usage), which is low-risk, but the package includes multiple executable scripts. Because the skill ships code but has no declared install steps, users may run the included scripts directly; the scripts call external network endpoints. No external downloads or obscure URLs are used.
Credentials
Discrepancy between metadata (no required env vars) and code: scripts require PARALLEL_API_KEY and some accept BROWSERUSE_API_KEY. Critically, scripts/search.py contains a hard-coded API key string as a default value — this is unexpected for a search client and may represent a leaked/test key or a backdoor allowing requests to run under the author's account. The hard-coded key is disproportionate and creates both functional and security concerns.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and does not request persistent platform privileges. It behaves like a normal task/utility client that can be invoked by the agent.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install parallel-ai - After installation, invoke the skill by name or use
/parallel-ai - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Version 1.0.1 of the "parallel-ai" skill
- No file changes detected in this release.
- Documentation, functionality, and triggers remain unchanged.
v1.0.0
- Initial release of Parallel.ai web search skill.
- Provides high-accuracy web search and research via Parallel.ai API.
- Supports multiple search modes: one-shot, fast, and agentic, each optimized for different use cases.
- Returns structured results with rich excerpts and citations for deep research and fact-checking.
- Python SDK integration and quick usage guide included.
Metadata
Frequently Asked Questions
What is Parallel AI Skill?
High-accuracy web search and research via Parallel.ai API. Optimized for AI agents with rich excerpts and citations. It is an AI Agent Skill for Claude Code / OpenClaw, with 631 downloads so far.
How do I install Parallel AI Skill?
Run "/install parallel-ai" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Parallel AI Skill free?
Yes, Parallel AI Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Parallel AI Skill support?
Parallel AI Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Parallel AI Skill?
It is built and maintained by joelchance (@joelchance); the current version is v1.0.1.
More Skills