fxmacrodata-calendar
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard data-fetching tool that follows security best practices. No malicious patterns or obfuscation were detected.
- [DATA_EXPOSURE]: API credentials are correctly managed using environment variables (FXMACRODATA_API_KEY). The script also includes a dedicated redaction mechanism to ensure that sensitive tokens are not inadvertently leaked in error messages or logs.
- [INDIRECT_PROMPT_INJECTION]: Although the skill ingests external data from an API, it implements a highly defensive validation layer. It strictly enforces data types, verifies quality flags (e.g., is_official, point_in_time_safe), and explicitly rejects non-finite JSON values like NaN or Infinity to prevent downstream processing issues.
- [COMMAND_EXECUTION]: The script uses only the Python standard library for its operations and does not invoke any external shell commands or sub-processes.
Audit Metadata