T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:43- Finding
Replayable Wallet Registration Signature
- Content
View full analysis
- Remediation
View remediation
Security audit
omnifun
Security checks for vulnerabilities and agentic risk
Overview
This skill is coherent for omni.fun trading, but it asks agents to use authenticated crypto-trading and token-launch APIs with broad triggers and weakly scoped safety guidance.
Review this before installing if you use real wallets or funds. Use a dedicated low-balance wallet, set strict oVault per-trade and daily limits immediately, avoid generic agent prompts like “trade” or “launch” unless you mean omni.fun, require manual review before reward claims, token launches, webhook changes, or signing returned calldata, and rotate the API key if it may have appeared in logs or process telemetry.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)
T09 · Insecure Skill Coding Practices
Note
- Location
SKILL.md:81- Finding
API Key Exposed Through Command-Line Process Arguments
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (23)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The trigger list includes broad generic terms like 'trade', 'launch', 'cross-chain', and 'memecoin', which can cause the skill to activate in unrelated contexts. Unintended invocation is risky here because the skill exposes authenticated trading, token launch, reward claim, and webhook-registration actions against an external financial API.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 88% confidence
- Finding
This registration flow transmits wallet identity and signature material to an external service to mint a long-lived API key. Although expected for onboarding, it creates an external trust boundary and could expose sensitive account linkage or enable abuse if users do not understand they are provisioning trading access to a third party.
- Content
Step 2 — Register and get your API key:
bash curl -X POST https://api.omni.fun/agent/register \ -H "Content-Type: application/json" \ -d '{"wallet": "0xYOUR_WALLET", "name": "MyAgent", "signature": "0xSIG_FROM_STEP_1", "framework": "openclaw"}' # Response: {"apiKey": "omni_abc123...", "agentId": "..."}
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 88% confidence
- Finding
This registration flow transmits wallet identity and signature material to an external service to mint a long-lived API key. Although expected for onboarding, it creates an external trust boundary and could expose sensitive account linkage or enable abuse if users do not understand they are provisioning trading access to a third party.
- Content
Step 2 — Register and get your API key:
bash curl -X POST https://api.omni.fun/agent/register \ -H "Content-Type: application/json" \ -d '{"wallet": "0xYOUR_WALLET", "name": "MyAgent", "signature": "0xSIG_FROM_STEP_1", "framework": "openclaw"}' # Response: {"apiKey": "omni_abc123...", "agentId": "..."}
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## Earn While You Trade **First 100 agents trade FREE for 60 days** (100% fee rebate on every trade). Check open slots: `GET https://api.omni.fun/agent/stats/growth` | Incentive | Amount | How | |-----------|--------|-----|
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 83% confidence
- Finding
Claiming rewards is a state-changing authenticated action against an external financial service. While less dangerous than a trade, accidental invocation could redirect funds timing, trigger unintended tax/accounting events, or interact with wallet-linked payout behavior without deliberate user intent.
- Content
Check rewards
curl -s -H "X-API-Key: $OMNIFUN_API_KEY" https://api.omni.fun/agent/rewards/summary | jq
Claim rewards
curl -X POST -H "X-API-Key: $OMNIFUN_API_KEY" https://api.omni.fun/agent/rewards/claim
text ## Security Model
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
bash # Set a $50/trade and $200/day limit curl -X PUT https://api.omni.fun/agent/vault \ -H "X-API-Key: $OMNIFUN_API_KEY" \ -H "Content-Type: application/json" \ -d '{"maxPerTrade": 50, "maxDaily": 200, "approvedChains": ["base", "arbitrum"]}'
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 90% confidence
- Finding
This duplicate URL-level finding still maps to a sensitive buy-trade flow that can lead to real asset movement once the returned calldata is signed. In a memecoin trading skill with broad triggers, the chance of unintended financial action materially increases the danger.
- Content
Buy a token
bash curl -X POST https://api.omni.fun/agent/trade \ -H "X-API-Key: $OMNIFUN_API_KEY" \ -H "Content-Type: application/json" \ -d '{"action": "buy", "token": "0xTOKEN", "amount": 10, "chain": "base"}'
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 90% confidence
- Finding
This duplicate URL-level finding still maps to a sensitive buy-trade flow that can lead to real asset movement once the returned calldata is signed. In a memecoin trading skill with broad triggers, the chance of unintended financial action materially increases the danger.
- Content
Buy a token
bash curl -X POST https://api.omni.fun/agent/trade \ -H "X-API-Key: $OMNIFUN_API_KEY" \ -H "Content-Type: application/json" \ -d '{"action": "buy", "token": "0xTOKEN", "amount": 10, "chain": "base"}'
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 90% confidence
- Finding
The authenticated sell-trade endpoint can prepare calldata to liquidate holdings through an external service, creating direct financial risk if used unintentionally or under prompt manipulation. Because sells can dispose of volatile assets quickly and cross-chain settlement may add complexity, misuse can cause irreversible losses.
- Content
Sell a token
bash curl -X POST https://api.omni.fun/agent/trade \ -H "X-API-Key: $OMNIFUN_API_KEY" \ -H "Content-Type: application/json" \ -d '{"action": "sell", "token": "0xTOKEN", "amount": 1000000, "chain": "base"}'
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 89% confidence
- Finding
This duplicate URL-level finding corresponds to the token launch flow, which can initiate a paid and reputation-sensitive action through external infrastructure. In context, launching memecoins across multiple chains amplifies the consequence of accidental use.
- Content
Launch your own token
bash curl -X POST https://api.omni.fun/agent/launch \ -H "X-API-Key: $OMNIFUN_API_KEY" \ -H "Content-Type: application/json" \ -d '{"name": "My Agent Token", "symbol": "MAGNT", "description": "AI agent token"}'
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 89% confidence
- Finding
This duplicate URL-level finding corresponds to the token launch flow, which can initiate a paid and reputation-sensitive action through external infrastructure. In context, launching memecoins across multiple chains amplifies the consequence of accidental use.
- Content
Launch your own token
bash curl -X POST https://api.omni.fun/agent/launch \ -H "X-API-Key: $OMNIFUN_API_KEY" \ -H "Content-Type: application/json" \ -d '{"name": "My Agent Token", "symbol": "MAGNT", "description": "AI agent token"}'
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 84% confidence
- Finding
Webhook registration sends a callback URL and enables external event delivery, which expands the attack surface and can expose internal endpoints if configured unsafely. If an agent registers arbitrary URLs, this can create SSRF-like operational risk, data leakage via callbacks, or abuse of internal webhook consumers.
- Content
Register a webhook to get instant notifications on new launches, graduations, and trade confirmations.
bash curl -X POST https://api.omni.fun/agent/webhooks \ -H "X-API-Key: $OMNIFUN_API_KEY" \ -H "Content-Type: application/json" \ -d '{"url": "https://your-agent.com/webhook", "events": ["token.new", "token.graduated", "trade.confirmed"]}'
Autonomous Decision Making
Medium
- Category
- Excessive Agency
- Confidence
- 85% confidence
- Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Content
md - $15 minimum for all cross-chain trades - 2% default slippage protection - $29 USDC launch fee - Tokens auto-deploy on 8 chains (~19s after launch) - Rewards paid every Monday — claim anytime, $10 minimum ## Resources