earnings-calendar
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell execution of local Python scripts (
scripts/fetch_earnings_fmp.pyandscripts/generate_report.py) to retrieve and format earnings data. This is standard behavior for the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: The skill connects to the Financial Modeling Prep (FMP) API (
financialmodelingprep.com) to fetch market data. Financial Modeling Prep is a well-known financial data provider, and these network operations are core to the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates external data from the FMP API into user-visible markdown reports, which is a potential surface for indirect injection if the source were compromised.
- Ingestion points: External data is ingested from the Financial Modeling Prep API via the
requestslibrary inscripts/fetch_earnings_fmp.py. - Boundary markers: No specific delimiters or warnings for the agent are used when processing the API response.
- Capability inventory: The skill has the capability to execute Python scripts via shell commands and write markdown files to the local directory.
- Sanitization: The skill parses JSON data but does not explicitly sanitize company names or ticker strings before placing them in markdown tables.
Audit Metadata