usfiscaldata
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and code to fetch public financial data from the official U.S. Treasury Fiscal Data API (
api.fiscaldata.treasury.gov). This is a well-known and trusted government service. - [COMMAND_EXECUTION]: Includes standard installation commands for the
requestsandpandasPython libraries using theuvpackage manager. These are necessary and routine dependencies for the skill's data processing functionality. - [DATA_EXPOSURE_AND_EXFILTRATION]: No credential exposure or exfiltration risks identified. The documentation correctly notes that the U.S. Treasury API is open and requires no authentication or API keys.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data from the Treasury API, this is limited to structured financial statistics. The examples provided focus on data analysis and visualization using DataFrames, which does not present a significant injection surface.
Audit Metadata