Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting feature on this repository instead.

Include the affected command, reproduction steps, expected impact, and any suggested mitigation. Reports will be acknowledged as soon as practical.

Parallel Agent CLI executes commands declared by the repository's .parallel-agent/project.yaml contract. Review that file before running pagent bootstrap --apply or pagent dev in an untrusted repository.

The CLI does not store provider credentials. Provider authentication and environment retrieval remain delegated to the provider's own command-line tools.