skills.rest
Wyl-cmd
Wyl-cmdCOMMUNITY
Explore all skills by this author →
GitHub

meme-coin-audit

Detect rug pulls and audit token contracts on EVM and Solana chains.

6|Updated Jan 31, 2026
Search Tags:#honeypot#foundry#defi#solana#token security#smart contract audit#rug pull detection
One-click install
npx skills add https://github.com/Wyl-cmd/kxns-cli --skill meme-coin-audit-wyl-cmd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: meme-coin-audit
Source: https://github.com/Wyl-cmd/kxns-cli/tree/main/src/kxns_cli/skills/meme-coin-audit
Command: npx skills add https://github.com/Wyl-cmd/kxns-cli --skill meme-coin-audit-wyl-cmd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Investors and security researchers lose funds to rug pulls, honeypots, and hidden mint functions in meme coins and tokens, and manual contract review is slow and error-prone. This Skill provides a systematic audit methodology to identify malicious token mechanics before investment or as part of a security review. ## Core Features & Use Cases - Pre-Dive Kill Signals: Instantly filter out obvious scams by checking contract verification, deployer history, retained mint/freeze authorities, and Token-2022 dangerous extensions before deep analysis. - 8 Token-Specific Bug Classes: Grep-based detection patterns for hidden mints, honeypot transfer restrictions, fee manipulation, LP drains, bonding curve exploits, authority retention, fake renounces, and sandwich amplification across Solidity and Rust codebases. - Solana On-Chain Verification: Source-free checks for mint authority, freeze authority, LP lock status, holder concentration, and Token-2022 transfer hooks using solana CLI and spl-token commands. - Foundry PoC Templates: Ready-to-use exploit test contracts demonstrating hidden mint, honeypot blacklist, and fee manipulation attacks on a mainnet fork. - Use Case: Before buying a new Solana meme coin, run the 6-question fast filter (authorities null, LP locked, holder concentration, bonding curve status) to decide in under 5 minutes whether the token is safe to touch. ## Quick Start Audit this token contract source code for rug pull vectors including hidden mint functions, honeypot transfer restrictions, and retained owner privileges.

Frequently Asked Questions about meme-coin-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a Solana token is a rug pull?▼

Check the mint authority and freeze authority using solana account or spl-token display commands; both should be null. Then verify LP tokens are burned or locked in a verified contract, and confirm top 10 holders control less than 30% of supply excluding pools.

How to detect a honeypot token before buying?▼

Simulate a buy, then a transfer to a second wallet, then a sell. If buy and transfer succeed but sell fails or applies over 50% tax, it is a honeypot. Cross-verify with rugcheck.xyz, dexscreener risk signals, and honeypot.is for EVM tokens.

What are Token-2022 transfer hook risks on Solana?▼

Token-2022 transfer hooks let a designated authority pause, blacklist, or apply fees to arbitrary addresses after launch. If the hook authority or permanent delegate is non-null, that key holder can revoke transfer rights or move any holder's tokens, which is rug-class risk.

Can I audit a token without source code?▼

Yes, on-chain checks work without source. Verify mint and freeze authorities are null, check LP lock status on the actual locker contract, review holder distribution on Birdeye or Solscan, and confirm the program is not upgradeable.

Why do LP lock badges on DexScreener not guarantee safety?▼

Lock badges are not verified on-chain. Some locks are 1-day locks renewed weekly, some lock contracts allow the owner to shorten the lock, and some use forked locker contracts with backdoors. Always read the actual lock contract on the chain explorer.

What are the limitations of grep-based smart contract auditing?▼

Source grep cannot verify on-chain state, holder distribution, LP lock status, or deployer wallet history. These require out-of-band verification through Etherscan, Solscan, DEXTools, Birdeye, and manual deployer investigation.

Related Skills

Explore More Software Engineering Skills→
ArianHobson333ArianHobson333
7

meme-coin-audit

Detect common security vulnerabilities in meme coins using Python scripts and on-chain analysis.

Community
Advanced
uphiagouphiago
1.1k

web3-audit

Identify critical security vulnerabilities in Solidity and Rust smart contracts.

Community
Advanced
0x0pointer0x0pointer
13

osint

Map target organizations through passive OSINT sources with confidence scoring.

Official
Advanced
BitterSecurityBitterSecurity
66

Lending Protocol Patterns

Detects vulnerabilities in DeFi lending protocols covering liquidations, interest rates, and collateral.

Official
Intermediate