What problem does it solve? Investors and auditors lose funds to rug pulls, honeypots, and hidden mint functions in meme coins because manual token contract review is slow and easy to get wrong. This Skill provides a structured audit workflow that flags kill signals before deep analysis and systematically checks the eight token-specific bug classes. ## Core Features & Use Cases - Pre-dive kill signals: Hard and soft kill criteria (unverified contracts, retained mint/freeze authority, Token-2022 transfer hooks, permanent delegates) to skip doomed tokens immediately. - Eight bug-class grep patterns: Ready-to-run searches for hidden mints, honeypots, fee manipulation, LP drains, bonding curve exploits, authority retention, fake renounces, and sandwich amplification across Solidity and Rust codebases. - Solana on-chain checks without source code: Verify mint authority, freeze authority, LP lock status, holder concentration, and Token-2022 extensions directly via CLI and explorers. - Foundry PoC templates: Test contracts demonstrating hidden mint, honeypot blacklist, and fee manipulation exploits on a mainnet fork. - Use Case: Before buying a new pump.fun token, run the 6-question fast filter (authorities null, LP locked, holder concentration, curve completion) to decide in under five minutes whether the token is safe to touch. ## Quick Start Audit this token contract for rug pull vectors and check its Solana mint and freeze authorities before I invest.
