earnings-calendar

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to ask users to paste their FMP API key into the conversation, store it in a session variable, and shows commands that embed that key (e.g., passing "${API_KEY}" to scripts), which requires the LLM to handle and potentially output the secret verbatim — an exfiltration risk.