Fomo Research

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 6:49 PM UTC
• Version: 0.3.0

Overview

This skill is a disclosed crypto research API integration with privacy and payment considerations, but no hidden or clearly unsafe behavior was found.

Install only if you are comfortable creating a Cope Capital API account and letting the provider see your selected Fomo handles, watchlists, and usage patterns. Keep COPE_API_KEY private, do not enable x402 unless you intentionally want paid calls, and review any local trade logs because they may reveal your research interests.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (36)

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 460)May include surrounding context.

md

- **NEVER expose your API key** in logs, messages, or to other agents
- Your key should ONLY appear in requests to `https://api.cope.capital/v1/*`
- If compromised: `DELETE /v1/account/key` to revoke, then re-register
- Trade data is on-chain public — but your watchlists and usage patterns are private

## Error Handling

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The trigger phrases are broad enough to match ordinary crypto discussion such as 'smart money', 'top traders', or 'wallet tracker', which increases the chance the skill is invoked when the user did not intend to authorize external API use. In this skill, unintended invocation matters because activation can lead to onboarding prompts, account registration, watchlist creation, and possible later paid actions.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 89% confidence

Finding

The example performs outbound registration to a third-party API and creates a credential tied to the agent. While normal for the product, it is still a genuine external transmission finding because it shares identifying metadata and establishes a secret that could later be mishandled.

Content

Scanner excerpt · SKILL.md (reported line 43)May include surrounding context.

Step 1: Register

bash

curl -X POST https://api.cope.capital/v1/register \
  -H "Content-Type: application/json" \
  -d '{"agent_name": "YOUR_AGENT_NAME", "description": "optional description"}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 89% confidence

Finding

The example performs outbound registration to a third-party API and creates a credential tied to the agent. While normal for the product, it is still a genuine external transmission finding because it shares identifying metadata and establishes a secret that could later be mishandled.

Content

Scanner excerpt · SKILL.md (reported line 43)May include surrounding context.

Step 1: Register

bash

curl -X POST https://api.cope.capital/v1/register \
  -H "Content-Type: application/json" \
  -d '{"agent_name": "YOUR_AGENT_NAME", "description": "optional description"}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 97% confidence

Finding

This request enables x402 and thereby authorizes real USDC payments through the account. The skill includes a warning, but if triggered without a strong consent gate it can change billing state and expose the user to monetary loss.

Content

Scanner excerpt · SKILL.md (reported line 64)May include surrounding context.

If they want to set up x402 now:

bash

curl -X PATCH https://api.cope.capital/v1/account \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"x402_enabled": true}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 93% confidence

Finding

Sending a Fomo username to sync profile data is a real transmission of user-linked identity data to a third party. Although central to the skill's purpose, it expands privacy exposure by linking the user's Fomo identity with the API account.

Content

Scanner excerpt · SKILL.md (reported line 80)May include surrounding context.

bash

# Sync their profile
curl -X POST https://api.cope.capital/v1/account/sync-fomo \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"fomo_handle": "THEIR_FOMO_USERNAME"}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 88% confidence

Finding

Creating a watchlist sends user-selected handles and persists preference data to the external service. This is expected behavior, but it still creates privacy and state-change risk if invoked unintentionally or without clear consent.

Content

Scanner excerpt · SKILL.md (reported line 101)May include surrounding context.

Pick one path and create the watchlist:

bash

curl -X POST https://api.cope.capital/v1/watchlists \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "alpha", "handles": ["frankdegods", "randomxbt"]}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 93% confidence

Finding

The workflow again instructs syncing the user's Fomo profile, which links external identity and social graph data to the service account. That privacy linkage is the core risk and is a true issue if not tightly consented.

Content

Scanner excerpt · SKILL.md (reported line 220)May include surrounding context.

bash

# 1. Sync your Fomo profile
curl -X POST https://api.cope.capital/v1/account/sync-fomo \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"fomo_handle": "your_handle"}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 93% confidence

Finding

The workflow again instructs syncing the user's Fomo profile, which links external identity and social graph data to the service account. That privacy linkage is the core risk and is a true issue if not tightly consented.

Content

Scanner excerpt · SKILL.md (reported line 220)May include surrounding context.

bash

# 1. Sync your Fomo profile
curl -X POST https://api.cope.capital/v1/account/sync-fomo \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"fomo_handle": "your_handle"}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 88% confidence

Finding

Persisting a watchlist to the provider is a real external state-changing action that stores behavioral interest data. If broad triggers activate the skill, this can create records on behalf of a user who did not clearly intend that storage.

Content

Scanner excerpt · SKILL.md (reported line 230)May include surrounding context.

md

-H "Authorization: Bearer cope_YOUR_KEY"

# 3. Create a watchlist with selected handles
curl -X POST https://api.cope.capital/v1/watchlists \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "alpha", "handles": ["frankdegods", "randomxbt"]}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 97% confidence

Finding

This call changes account state to enable automatic paid calls using USDC, which has direct financial consequences. The surrounding warning helps, but the presence of an executable state-changing example means the skill should treat this as high-risk and isolate it from normal flows.

Content

Scanner excerpt · SKILL.md (reported line 368)May include surrounding context.

⚠️ NEVER enable x402 without your human's explicit permission. This authorizes real USDC payments.

bash

curl -X PATCH https://api.cope.capital/v1/account \
  -H "Authorization: Bearer cope_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"x402_enabled": true}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 19)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 86)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 161)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 210)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 226)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 240)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 245)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 253)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 257)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 265)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 269)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 278)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 288)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 300)May include surrounding context.

md

# Cope Capital API Reference (v0.3.0)

Full interactive docs: https://api.cope.capital/docs

## Base URL

Static analysis

No suspicious patterns detected.