earnings-calendar

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local Python scripts (scripts/fetch_earnings_fmp.py and scripts/generate_report.py) to fetch data and generate reports. These operations are restricted to the skill's own distributed scripts and represent the intended core functionality.\n- [EXTERNAL_DOWNLOADS]: Fetches financial data from the official financialmodelingprep.com API. This is a legitimate financial data service, and the skill uses it solely to retrieve the requested earnings calendar information.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (company names and ticker symbols) from the FMP API. \n
  • Ingestion points: External data enters the context via API responses handled in scripts/fmp_client.py.\n
  • Boundary markers: Data is structured into markdown tables by scripts/generate_report.py.\n
  • Capability inventory: Capabilities include local script execution for data processing.\n
  • Sanitization: The skill performs string truncation on company names and sectors in scripts/generate_report.py, providing a basic layer of protection against malformed or long injection strings. The risk is assessed as low.\n- [SAFE]: The skill implements proactive security measures, notably in scripts/fmp_client.py, which includes logic to redact the FMP API key from URLs and error messages to prevent accidental exposure. It also includes a comprehensive test suite to verify these security and functional behaviors.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 06:24 AM