Parallel Enrichment

Bulk data enrichment via Parallel API. Adds web-sourced fields (CEO names, funding, contact info) to lists of companies, people, or products. Use for enriching CSV files or inline data.

Before installing or using this skill: (1) Verify you have parallel-cli installed and know how it is authenticated—ask the skill author whether an API key (e.g., PARALLEL_API_KEY) or CLI login is required and where that credential is stored. (2) Treat the absence of declared binaries/credentials as a red flag: do not assume the skill is self-contained. (3) Run the CLI locally on a small non-sensitive dataset first to confirm behavior (what is sent to the network, monitoring URLs, and output format). (4) Be cautious about file paths: the skill instructs spawning sub-agents to read files—ensure those tools only access intended files and that no sensitive files are in the same directories. (5) If you need higher assurance, ask the publisher for provenance (author identity, source repo or install instructions) or prefer an officially published integration from Parallel.ai that documents auth and installation.

Type: OpenClaw Skill Name: parallel-enrichment Version: 1.0.0 The skill is classified as suspicious primarily due to the `curl -fsSL https://parallel.ai/install.sh | bash` command in `SKILL.md` for installing its CLI. While this is a common installation method, it is a significant security risk as it executes arbitrary remote code directly, making it vulnerable to supply chain attacks if the `parallel.ai` server or the `install.sh` script were compromised. Additionally, the skill involves reading and writing local files (e.g., CSVs) and uses `sessions_spawn` to process temporary files, granting file system access, which, while necessary for its stated purpose, adds to the overall risk profile.