fxmacrodata
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with a remote API at
https://mcp.fxmacrodata.com/mcpto fetch financial and macroeconomic data. This is the core functionality of the skill and is directed to a specific service domain (fxmacrodata.com) associated with the tool's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface through macroeconomic data retrieved from the external API.
- Ingestion points: Data results from tools like
indicator_queryandlatest_announcementsinSKILL.mdare loaded into the agent's context. - Boundary markers: None explicitly defined in the provided instruction file.
- Capability inventory: The skill does not possess high-risk capabilities such as arbitrary shell command execution, local file system writes, or privilege escalation tools.
- Sanitization: Not explicitly mentioned, but the risk is minimized by the specialized and structured nature of the returned financial data (numerical and statistical macro data).
- [SAFE]: The documentation provides instructions for using API keys via environment variables (e.g.,
${FXMACRODATA_API_KEY}) and HTTP headers. This avoids hardcoded secrets and follows standard secure configuration practices for secret management.
Audit Metadata