$npx -y skills add draguris/dragonclaw --skill token-auditDetect scams, honeypots, and malicious contracts on BSC, Base, Solana, Ethereum. No API key needed.
| 1 | # Token Security Audit |
| 2 | |
| 3 | Audit token smart contracts for security risks including honeypots, rug pulls, fake tokens, and malicious permissions. |
| 4 | |
| 5 | ## When to Use |
| 6 | User asks to check if a token is safe, audit a contract, detect scams, verify a meme coin, or asks "is this legit." |
| 7 | |
| 8 | ## No API Key Required |
| 9 | |
| 10 | ## Endpoint |
| 11 | GET /bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/risk/audit |
| 12 | Params: contractAddress, chainId (56=BSC, 1=ETH, CT_501=Solana, 8453=Base) |
| 13 | |
| 14 | ## Tool Call |
| 15 | ```tool |
| 16 | {"tool": "binance_market", "action": "GET", "endpoint": "/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/risk/audit", "params": {"contractAddress": "TOKEN_ADDRESS", "chainId": "CT_501"}} |
| 17 | ``` |
| 18 | |
| 19 | ## Risk Interpretation |
| 20 | - Check for: mintable, pausable, blacklist, high tax, proxy contract |
| 21 | - Flag if tax > 10% or if owner retains mint/pause authority |
| 22 | - State risk level clearly: LOW / MEDIUM / HIGH / CRITICAL |