Earnings Calendar

PassAudited by ClawScan on May 10, 2026.

Overview

The skill appears purpose-aligned for fetching FMP earnings data, but it asks for an API key and runs bundled Python scripts, so users should handle the key carefully.

This skill looks appropriate for generating an earnings calendar. Before installing or using it, be prepared to provide an FMP API key, preferably through the FMP_API_KEY environment variable rather than pasting it into a command, and review the bundled Python scripts because the registry metadata does not fully declare runtime dependencies.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your FMP API key will be used to retrieve data and may be visible in the conversation if pasted there.

Why it was flagged

The skill needs a provider credential to call the FMP API. This is expected for the stated integration, but it still gives the skill access to the user's FMP API quota/account.

Skill content
This skill requires a Financial Modeling Prep API key.
Recommendation

Use a limited/free FMP key, prefer setting FMP_API_KEY as an environment variable, and avoid sharing conversations that contain the key.

What this means

Using the skill can run local Python code that makes network requests to FMP and processes report files.

Why it was flagged

The skill instructs execution of a bundled Python script with the API key. This is disclosed and central to fetching earnings data, but it is still local code execution.

Skill content
python scripts/fetch_earnings_fmp.py 2025-11-03 2025-11-09 "${API_KEY}"
Recommendation

Review the bundled scripts before running, execute them as a normal user, and prefer the environment-variable API-key path when available.

What this means

You may need to supply your own Python environment and trust the bundled scripts without an external homepage or pinned package context.

Why it was flagged

The skill includes runnable Python files but has sparse provenance and no install/dependency specification in the registry metadata. This is not evidence of malicious behavior, but it reduces reviewability.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Inspect the included scripts and dependencies before use, and install any needed Python packages from trusted sources.