A comprehensive security auditing tool that identifies high-risk vulnerabilities, tax traps, and liquidity locks in blockchain token contracts.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install token-scan
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install token-scan using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Token Scan?
Token Scan is a specialized utility designed for AI agents to perform deep security due diligence on cryptocurrency tokens across multiple blockchain networks. By leveraging the CertiK API, this skill provides a detailed risk profile of any given contract address, surfacing critical data points like security scores, alert severity, and automated contract behavior insights. As a vital part of the Openclaw Skills ecosystem, it allows developers to build agents that can autonomously verify the safety of assets before users interact with them.
The skill excels at translating complex smart contract data into actionable intelligence. It identifies malicious patterns such as honeypots, excessive taxes, or dangerous owner privileges, making it indispensable for DeFi developers and security researchers who need fast, reliable audits within their coding environment or agent workflows.
Token Scan Use Cases
- Performing automated security checks on new token listings across supported chains.
- Identifying high-risk code patterns and critical vulnerabilities in smart contracts.
- Analyzing buy and sell tax structures to detect potential honeypots or fee manipulation.
- Reviewing liquidity provider (LP) lock status and holder concentration to assess rug-pull risks.
- Integrating real-time security scores into trading bots or financial research agents.
How Token Scan Works
- Validates the user-provided chain and contract address against supported network formats (e.g., EVM, Solana, TON).
- Executes a security scan request via the CertiK Open API using either a bundled Python script or a curl fallback.
- Polls the API to ensure the scan is complete, handling 'in progress' states to prevent premature reporting.
- Parses the returned JSON payload to extract the risk score, alert list, and extended security signals.
- Formats the output into a prioritized summary, highlighting critical alerts first and clarifying tax deduction factors vs. actual percentages.
Token Scan Setup
To use this skill within Openclaw Skills, ensure you have Python 3.9 or higher installed. The skill primarily utilizes a Python script but can fallback to a direct API call.
# Standard execution via Python script
python3 scripts/token_scan.py --chain "eth" --contract "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
# Fallback execution via curl
curl -sG "https://open.api.certik.com/token-scan" \
-H "Accept: application/json" \
--data-urlencode "chain=eth" \
--data-urlencode "address=0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
Token Scan Data Schema & Taxonomy
The skill organizes security data into a structured hierarchy for easy parsing by AI agents:
| Component | Details Included |
|---|---|
| Risk Overview | Security score, total alert count, and the highest severity level found. |
| Alert List | Top 8 alerts sorted by severity (Critical, Major, Medium, Minor). |
| Token Signals | Real-time buy/sell tax values, holder concentration metrics, and LP status. |
| Chain Meta | Network-specific address validation (EVM Hex, Base58, Bech32). |
Note: The tool distinguishes between skyknight_score deduction factors and actual tax percentages found in extended data fields.
Token Scan Advanced Features
- Multi-chain compatibility supporting BSC, Ethereum, Solana, Arbitrum, Base, Polygon, Avax, Tron, TON, Plasma, and Sui.
- Intelligent status monitoring that differentiates between active scans, successful completions, and upstream API errors.
- Automated alert prioritization ensuring that Critical and Major risks are never buried under minor notifications.
- Explicit tax interpretation logic that identifies deduction factors to avoid misrepresenting contract fees.
- Flexible execution pathways optimized for both Python-heavy environments and lightweight CLI integrations within Openclaw Skills.
SKILL.md
Loading
Related Openclaw Skills
PPT Icon Generator
A versatile tool for generating, searching, and converting transparent PNG icons tailored for professional PowerPoint presentations.
GitHub Trend Analyzer
A powerful analysis tool that monitors GitHub Trending to identify hot projects and emerging technical directions.
Calibre Convert
A professional-grade ebook and document format converter leveraging the Calibre ebook-convert CLI.
Xueersi Idiom Chain Game
An interactive AI-powered Chinese idiom chain game designed to help users master chengyu through gamified learning and difficulty-based challenges.
IC Search
A professional AI skill for real-time electronic component pricing, inventory tracking, and supply chain sourcing.
Toutiao Hot Trend
A specialized AI agent skill for searching, extracting, and summarizing trending content and public metadata from the Jinri Toutiao platform.
Featured*
