Fomo Research

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 6:49 PM UTC
• Version: 0.3.0

Overview

This skill is a disclosed crypto research API integration with privacy and payment considerations, but no hidden or clearly unsafe behavior was found.

Install only if you are comfortable creating a Cope Capital API account and letting the provider see your selected Fomo handles, watchlists, and usage patterns. Keep COPE_API_KEY private, do not enable x402 unless you intentionally want paid calls, and review any local trade logs because they may reveal your research interests.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (36)

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- **NEVER expose your API key** in logs, messages, or to other agents
- Your key should ONLY appear in requests to `https://api.cope.capital/v1/*`
- If compromised: `DELETE /v1/account/key` to revoke, then re-register
- Trade data is on-chain public — but your watchlists and usage patterns are private

## Error Handling

• Confidence: 80% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger phrases are broad enough to match ordinary crypto discussion such as 'smart money', 'top traders', or 'wallet tracker', which increases the chance the skill is invoked when the user did not intend to authorize external API use. In this skill, unintended invocation matters because activation can lead to onboarding prompts, account registration, watchlist creation, and possible later paid actions.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Step 1: Register

```bash
curl -X POST https://api.cope.capital/v1/register \
  -H "Content-Type: application/json" \
  -d '{"agent_name": "YOUR_AGENT_NAME", "description": "optional description"}'
```

• Confidence: 89% confidence
• Finding: The example performs outbound registration to a third-party API and creates a credential tied to the agent. While normal for the product, it is still a genuine external transmission finding because it shares identifying metadata and establishes a secret that could later be mishandled.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Step 1: Register

```bash
curl -X POST https://api.cope.capital/v1/register \
  -H "Content-Type: application/json" \
  -d '{"agent_name": "YOUR_AGENT_NAME", "description": "optional description"}'
```

• Confidence: 89% confidence
• Finding: The example performs outbound registration to a third-party API and creates a credential tied to the agent. While normal for the product, it is still a genuine external transmission finding because it shares identifying metadata and establishes a secret that could later be mishandled.

External Transmission

Medium

• Category: Data Exfiltration

Content

If they want to set up x402 now:

```bash
curl -X PATCH https://api.cope.capital/v1/account \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"x402_enabled": true}'

• Confidence: 97% confidence
• Finding: This request enables x402 and thereby authorizes real USDC payments through the account. The skill includes a warning, but if triggered without a strong consent gate it can change billing state and expose the user to monetary loss.

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# Sync their profile
curl -X POST https://api.cope.capital/v1/account/sync-fomo \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"fomo_handle": "THEIR_FOMO_USERNAME"}'

• Confidence: 93% confidence
• Finding: Sending a Fomo username to sync profile data is a real transmission of user-linked identity data to a third party. Although central to the skill's purpose, it expands privacy exposure by linking the user's Fomo identity with the API account.

External Transmission

Medium

• Category: Data Exfiltration

Content

Pick one path and create the watchlist:

```bash
curl -X POST https://api.cope.capital/v1/watchlists \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "alpha", "handles": ["frankdegods", "randomxbt"]}'

• Confidence: 88% confidence
• Finding: Creating a watchlist sends user-selected handles and persists preference data to the external service. This is expected behavior, but it still creates privacy and state-change risk if invoked unintentionally or without clear consent.

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# 1. Sync your Fomo profile
curl -X POST https://api.cope.capital/v1/account/sync-fomo \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"fomo_handle": "your_handle"}'

• Confidence: 93% confidence
• Finding: The workflow again instructs syncing the user's Fomo profile, which links external identity and social graph data to the service account. That privacy linkage is the core risk and is a true issue if not tightly consented.

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# 1. Sync your Fomo profile
curl -X POST https://api.cope.capital/v1/account/sync-fomo \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"fomo_handle": "your_handle"}'

• Confidence: 93% confidence
• Finding: The workflow again instructs syncing the user's Fomo profile, which links external identity and social graph data to the service account. That privacy linkage is the core risk and is a true issue if not tightly consented.

External Transmission

Medium

• Category: Data Exfiltration

Content

-H "Authorization: Bearer cope_YOUR_KEY"

# 3. Create a watchlist with selected handles
curl -X POST https://api.cope.capital/v1/watchlists \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "alpha", "handles": ["frankdegods", "randomxbt"]}'

• Confidence: 88% confidence
• Finding: Persisting a watchlist to the provider is a real external state-changing action that stores behavioral interest data. If broad triggers activate the skill, this can create records on behalf of a user who did not clearly intend that storage.

External Transmission

Medium

• Category: Data Exfiltration

Content

⚠️ **NEVER enable x402 without your human's explicit permission.** This authorizes real USDC payments.

```bash
curl -X PATCH https://api.cope.capital/v1/account \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"x402_enabled": true}'

• Confidence: 97% confidence
• Finding: This call changes account state to enable automatic paid calls using USDC, which has direct financial consequences. The surrounding warning helps, but the presence of an executable state-changing example means the skill should treat this as high-risk and isolate it from normal flows.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Static analysis

No suspicious patterns detected.