earnings-calendar
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
scripts/fetch_earnings_fmp.pyandscripts/generate_report.py) to fetch data and generate reports. These operations are restricted to the skill's own distributed scripts and represent the intended core functionality.\n- [EXTERNAL_DOWNLOADS]: Fetches financial data from the officialfinancialmodelingprep.comAPI. This is a legitimate financial data service, and the skill uses it solely to retrieve the requested earnings calendar information.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (company names and ticker symbols) from the FMP API. \n - Ingestion points: External data enters the context via API responses handled in
scripts/fmp_client.py.\n - Boundary markers: Data is structured into markdown tables by
scripts/generate_report.py.\n - Capability inventory: Capabilities include local script execution for data processing.\n
- Sanitization: The skill performs string truncation on company names and sectors in
scripts/generate_report.py, providing a basic layer of protection against malformed or long injection strings. The risk is assessed as low.\n- [SAFE]: The skill implements proactive security measures, notably inscripts/fmp_client.py, which includes logic to redact the FMP API key from URLs and error messages to prevent accidental exposure. It also includes a comprehensive test suite to verify these security and functional behaviors.
Audit Metadata