fxmacrodata-calendar

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a standard data-fetching tool that follows security best practices. No malicious patterns or obfuscation were detected.
  • [DATA_EXPOSURE]: API credentials are correctly managed using environment variables (FXMACRODATA_API_KEY). The script also includes a dedicated redaction mechanism to ensure that sensitive tokens are not inadvertently leaked in error messages or logs.
  • [INDIRECT_PROMPT_INJECTION]: Although the skill ingests external data from an API, it implements a highly defensive validation layer. It strictly enforces data types, verifies quality flags (e.g., is_official, point_in_time_safe), and explicitly rejects non-finite JSON values like NaN or Infinity to prevent downstream processing issues.
  • [COMMAND_EXECUTION]: The script uses only the Python standard library for its operations and does not invoke any external shell commands or sub-processes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 04:09 PM