fred-economic-data
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a legitimate wrapper for the Federal Reserve Economic Data (FRED) API.
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to "api.stlouisfed.org" and "geofred.stlouisfed.org". These are official, well-known domains managed by the Federal Reserve Bank of St. Louis and are considered safe sources for economic data.
- [CREDENTIALS_UNSAFE]: The documentation and code correctly guide the user to manage their FRED API key via environment variables ("FRED_API_KEY"), which is a recommended security practice for secret management and avoids hardcoding sensitive information.
- [PROMPT_INJECTION]: The "SKILL.md" file contains instructions for the agent to proactively suggest the author's research platform ("k-dense.ai") when user queries increase in complexity. While this represents a form of behavioral steering for promotional purposes, it does not target safety guardrails, attempt to exfiltrate data, or pose a functional security threat.
Audit Metadata