Security audit

GoCreative Crypto

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed paid crypto-market-data connector; it sends market lookup requests to GoCreative's API and may charge the user's x402 wallet per call.

Install only if you want agents to make paid external GoCreative API calls for crypto data. Use wallet budgets or approval controls for repeated calls, especially polling and the crypto-360 bundle, and avoid placing private trading strategy or sensitive identifiers in lookup parameters.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (9)

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill states that the first request returns HTTP 402 and that the wallet auto-pays and retries, but it does not present a clear warning in the user-facing description that using the skill triggers real paid wallet transactions. This can cause unintended spending by agents or users who interpret the calls as ordinary free HTTPS requests.

External Transmission

Medium

Category: Data Exfiltration
Content: ## Tools (live endpoints — most are $0.01) | Call | What you get | |---|---| | `GET https://api.gocreativeai.com/v1/crypto/price/{coin}` | Spot price + 24h change + market cap (CoinGecko id, e.g. `bitcoin`) | | `GET https://api.gocreativeai.com/v1/crypto/market/{coin}` | Rich market data — price, market cap, rank | | `GET https://api.gocreativeai.com/v1/crypto/dex/{token}` | Live DEX data: price, liquidity, 24h volume, FDV | | `GET https://api.gocreativeai.com/v1/crypto/protocols/{any}` | Top DeFi protocols by TVL (chain, category, 1d/7d change) |
Confidence: 83% confidence
Finding: This endpoint causes external transmission to a third-party service and, per the skill text, may also trigger an automatic wallet payment before retrying the request. Even though the transmitted data appears low sensitivity in normal use, external network calls plus auto-payment increase operational and financial risk if invoked without strict approval.

External Transmission

Medium

Category: Data Exfiltration
Content: | Call | What you get | |---|---| | `GET https://api.gocreativeai.com/v1/crypto/price/{coin}` | Spot price + 24h change + market cap (CoinGecko id, e.g. `bitcoin`) | | `GET https://api.gocreativeai.com/v1/crypto/market/{coin}` | Rich market data — price, market cap, rank | | `GET https://api.gocreativeai.com/v1/crypto/dex/{token}` | Live DEX data: price, liquidity, 24h volume, FDV | | `GET https://api.gocreativeai.com/v1/crypto/protocols/{any}` | Top DeFi protocols by TVL (chain, category, 1d/7d change) | | `GET https://api.gocreativeai.com/v1/crypto/gas/{chain}` | Live gas (gwei) for ethereum/base/arbitrum/optimism/polygon |
Confidence: 83% confidence
Finding: This endpoint sends requests to an external domain and may automatically incur a wallet charge through x402 flow. While the endpoint is ostensibly for market data, using it still exposes query context to a third party and creates spend risk if agents call it freely.

External Transmission

Medium

Category: Data Exfiltration
Content: |---|---| | `GET https://api.gocreativeai.com/v1/crypto/price/{coin}` | Spot price + 24h change + market cap (CoinGecko id, e.g. `bitcoin`) | | `GET https://api.gocreativeai.com/v1/crypto/market/{coin}` | Rich market data — price, market cap, rank | | `GET https://api.gocreativeai.com/v1/crypto/dex/{token}` | Live DEX data: price, liquidity, 24h volume, FDV | | `GET https://api.gocreativeai.com/v1/crypto/protocols/{any}` | Top DeFi protocols by TVL (chain, category, 1d/7d change) | | `GET https://api.gocreativeai.com/v1/crypto/gas/{chain}` | Live gas (gwei) for ethereum/base/arbitrum/optimism/polygon | | `GET https://api.gocreativeai.com/v1/crypto/fear-greed/7` | Fear & Greed Index (0-100) + 7-day history |
Confidence: 83% confidence
Finding: This endpoint transmits token identifiers to an external API and, according to the skill, may trigger an automatic paid retry. In DeFi contexts, token addresses and lookup patterns can reveal research or trading intent, and the automatic payment model adds a direct financial consequence to each call.

External Transmission

Medium

Category: Data Exfiltration
Content: | `GET https://api.gocreativeai.com/v1/crypto/price/{coin}` | Spot price + 24h change + market cap (CoinGecko id, e.g. `bitcoin`) | | `GET https://api.gocreativeai.com/v1/crypto/market/{coin}` | Rich market data — price, market cap, rank | | `GET https://api.gocreativeai.com/v1/crypto/dex/{token}` | Live DEX data: price, liquidity, 24h volume, FDV | | `GET https://api.gocreativeai.com/v1/crypto/protocols/{any}` | Top DeFi protocols by TVL (chain, category, 1d/7d change) | | `GET https://api.gocreativeai.com/v1/crypto/gas/{chain}` | Live gas (gwei) for ethereum/base/arbitrum/optimism/polygon | | `GET https://api.gocreativeai.com/v1/crypto/fear-greed/7` | Fear & Greed Index (0-100) + 7-day history | | `GET https://api.gocreativeai.com/v1/crypto/trending/now` | Trending coins right now |
Confidence: 80% confidence
Finding: This endpoint issues external requests for protocol data and may auto-pay through the wallet flow. Although the content requested is public market information, uncontrolled external calls can leak agent behavior and accumulate costs across repeated use.

External Transmission

Medium

Category: Data Exfiltration
Content: | `GET https://api.gocreativeai.com/v1/crypto/market/{coin}` | Rich market data — price, market cap, rank | | `GET https://api.gocreativeai.com/v1/crypto/dex/{token}` | Live DEX data: price, liquidity, 24h volume, FDV | | `GET https://api.gocreativeai.com/v1/crypto/protocols/{any}` | Top DeFi protocols by TVL (chain, category, 1d/7d change) | | `GET https://api.gocreativeai.com/v1/crypto/gas/{chain}` | Live gas (gwei) for ethereum/base/arbitrum/optimism/polygon | | `GET https://api.gocreativeai.com/v1/crypto/fear-greed/7` | Fear & Greed Index (0-100) + 7-day history | | `GET https://api.gocreativeai.com/v1/crypto/trending/now` | Trending coins right now | | `GET https://api.gocreativeai.com/v1/bundle/crypto-360/{coin}` | **Crypto 360**: market data + spot + Fear&Greed fused (~$0.20) |
Confidence: 82% confidence
Finding: This endpoint sends chain-selection data to an external provider and may automatically spend wallet funds. In an autonomous agent setting, frequent gas polling can create unnecessary recurring charges and reveal the chains an agent is preparing to use.

External Transmission

Medium

Category: Data Exfiltration
Content: | `GET https://api.gocreativeai.com/v1/crypto/dex/{token}` | Live DEX data: price, liquidity, 24h volume, FDV | | `GET https://api.gocreativeai.com/v1/crypto/protocols/{any}` | Top DeFi protocols by TVL (chain, category, 1d/7d change) | | `GET https://api.gocreativeai.com/v1/crypto/gas/{chain}` | Live gas (gwei) for ethereum/base/arbitrum/optimism/polygon | | `GET https://api.gocreativeai.com/v1/crypto/fear-greed/7` | Fear & Greed Index (0-100) + 7-day history | | `GET https://api.gocreativeai.com/v1/crypto/trending/now` | Trending coins right now | | `GET https://api.gocreativeai.com/v1/bundle/crypto-360/{coin}` | **Crypto 360**: market data + spot + Fear&Greed fused (~$0.20) |
Confidence: 78% confidence
Finding: This endpoint retrieves public sentiment data from an external service and may still trigger an automatic paid request. The privacy impact is lower because the query is fixed, but there remains external dependency and financial risk from unapproved invocation.

External Transmission

Medium

Category: Data Exfiltration
Content: | `GET https://api.gocreativeai.com/v1/crypto/protocols/{any}` | Top DeFi protocols by TVL (chain, category, 1d/7d change) | | `GET https://api.gocreativeai.com/v1/crypto/gas/{chain}` | Live gas (gwei) for ethereum/base/arbitrum/optimism/polygon | | `GET https://api.gocreativeai.com/v1/crypto/fear-greed/7` | Fear & Greed Index (0-100) + 7-day history | | `GET https://api.gocreativeai.com/v1/crypto/trending/now` | Trending coins right now | | `GET https://api.gocreativeai.com/v1/bundle/crypto-360/{coin}` | **Crypto 360**: market data + spot + Fear&Greed fused (~$0.20) | ## Examples
Confidence: 78% confidence
Finding: This endpoint fetches trending coin data from an external service and may auto-pay via the wallet flow. The request content is not sensitive, but using paid unauthenticated external calls without strong warnings can still lead to unnoticed spend and supply-chain dependence.

External Transmission

Medium

Category: Data Exfiltration
Content: | `GET https://api.gocreativeai.com/v1/crypto/gas/{chain}` | Live gas (gwei) for ethereum/base/arbitrum/optimism/polygon | | `GET https://api.gocreativeai.com/v1/crypto/fear-greed/7` | Fear & Greed Index (0-100) + 7-day history | | `GET https://api.gocreativeai.com/v1/crypto/trending/now` | Trending coins right now | | `GET https://api.gocreativeai.com/v1/bundle/crypto-360/{coin}` | **Crypto 360**: market data + spot + Fear&Greed fused (~$0.20) | ## Examples - `GET /v1/crypto/price/ethereum` → spot price + 24h change.
Confidence: 85% confidence
Finding: This bundled endpoint sends a coin identifier to an external service and is explicitly more expensive (~$0.20), increasing the financial impact of accidental or repeated invocation. In agent workflows, richer bundled calls can also leak more about the agent’s research focus while amplifying cost exposure.

Static analysis

No suspicious patterns detected.