earnings-calendar

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill fetches financial data from financialmodelingprep.com, which is a well-known financial service provider. No executable code or suspicious content is downloaded.
  • [SAFE]: API key handling is managed securely via environment variables or session-only user prompts, accompanied by explicit security guidance for the user.
  • [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were found in the skill's code or instructions.
  • [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection by processing data from an external API and manual user input to generate reports.
  • Ingestion points: External data enters through API responses in fetch_earnings_fmp.py and manual user-provided data in the fallback workflow.
  • Boundary markers: No explicit delimiters or boundary instructions are used during report generation.
  • Capability inventory: The skill uses local Python scripts to read/write files and perform network requests for financial data.
  • Sanitization: The generate_report.py script implements basic field length truncation but does not perform comprehensive escaping for markdown syntax or terminal control characters.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 04:29 AM
Security Audit — agent-trust-hub — earnings-calendar