← Back to Skills Marketplace
162
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install token-scan
Description
Scan token contract security risk and return a structured summary including score, tax, holder concentration, and LP lock status. Supported chains are bsc, e...
Usage Guidance
This skill appears to do exactly what it says: it sends the chain and contract address to CertiK's public token-scan API and returns JSON. Before installing, consider: (1) network calls to open.api.certik.com will reveal which contract addresses you query — if that is sensitive for your organization, avoid using it; (2) the script prints raw JSON, so the agent should format/sanitize outputs before exposing them to users; (3) SKILL.md recommends validating address formats but the bundled script does not — ensure the agent performs any required validation; (4) no credentials are requested, so there is no secret-exfiltration risk from this skill itself, but third-party API logging/policy is out of scope. Overall the pieces are coherent and proportionate.
Capability Analysis
Type: OpenClaw Skill
Name: token-scan
Version: 1.0.0
The skill is a legitimate tool for scanning cryptocurrency token contracts for security risks using the CertiK Token Scan API (open.api.certik.com). The Python script (scripts/token_scan.py) and agent instructions (SKILL.md) are well-structured, perform standard API requests, and show no evidence of malicious intent, data exfiltration, or unauthorized command execution.
Capability Assessment
Purpose & Capability
Name/description match the implementation: the bundled script and SKILL.md call the public CertiK token-scan API (open.api.certik.com) to retrieve a token risk scan. There are no unrelated credentials, binaries, or services requested.
Instruction Scope
SKILL.md restricts usage to supported chains and instructs validation of addresses and use of the bundled Python script (with a curl fallback). The Python script itself simply performs an HTTP GET and does not perform address-format validation; the SKILL.md places some validation responsibility on the agent. This is a minor mismatch but not malicious.
Install Mechanism
No install spec — instruction-only with a small included Python script. No downloads from arbitrary URLs, no archives extracted, and nothing is written to disk beyond executing the provided script. Low install risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. It makes outbound HTTPS calls to a single third-party endpoint (CertiK). The network access is proportional to the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. Autonomous invocation is allowed but is the platform default; this skill does not request elevated persistence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install token-scan - After installation, invoke the skill by name or use
/token-scan - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of token-scan skill.
- Provides structured security risk analysis for token contracts on 11 supported chains (bsc, eth, solana, arbitrum, base, polygon, avax, tron, ton, plasma, sui).
- Returns risk score, alert count, alert severity, token tax info, holder concentration, and LP lock status.
- Alerts are sorted by severity, with top 8 highest-priority items shown if more exist.
- Interprets real buy/sell tax when available and clarifies difference from deduction factors.
- Explains supported chain/address formats and enforces input validation.
- Reports scan status (in progress, success, or error) clearly to the user.
Metadata
Frequently Asked Questions
What is Token Scan?
Scan token contract security risk and return a structured summary including score, tax, holder concentration, and LP lock status. Supported chains are bsc, e... It is an AI Agent Skill for Claude Code / OpenClaw, with 162 downloads so far.
How do I install Token Scan?
Run "/install token-scan" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Token Scan free?
Yes, Token Scan is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Token Scan support?
Token Scan is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Token Scan?
It is built and maintained by CertiK (@certik-ai); the current version is v1.0.0.
More Skills