earnings-calendar

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill appears benign and coherent with its stated purpose: it uses a legitimate API (FMP), applies a clear market-cap filter, and outputs structured financial data in Markdown for user consumption. There are standard credential-handling patterns (session-based API keys, environment variables) and no evident download-execute or data-exfiltration behaviors. The main concerns are typical for API-driven tooling (credential exposure in logs or ephemeral storage) and ensuring proper handling of rate limits and data freshness. Overall, the footprint is proportionate to the described purpose, with moderate security risk due to session-stored API keys and external API dependency, but not indicative of malicious intent.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 06:09 AM
Package URL
pkg:socket/skills-sh/tradermonty%2Fclaude-trading-skills%2Fearnings-calendar%2F@756addc50ec2013e03e43fbaa1f3c24abc2ecf3b