earnings-trade-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches financial data, including earnings calendars, company profiles, and historical prices, from the Financial Modeling Prep (FMP) API at
financialmodelingprep.com. This is the core intended functionality of the skill. - [CREDENTIALS_UNSAFE]: The skill uses an API key for authentication with the FMP service. The implementation includes a
_redact_secrethelper function in the API client to ensure that the API key is masked and does not appear in error messages or logs. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external API source. While it includes boundary checks and primarily uses structured numeric data for scoring, descriptions like company names are rendered in the final Markdown report. This represents a standard surface for indirect prompt injection common to data-processing tools, though the risk is assessed as low given the source type.
- [COMMAND_EXECUTION]: The skill uses standard Python libraries for all calculations and file operations. There are no instances of arbitrary command execution or shell injection vulnerabilities.
Audit Metadata