token-authority-and-risk

Name: token-authority-and-risk
Availability: InStock
Author: OPSIRIUS

Inventory and configure SPL token authorities for mint, freeze, and close.

3|Updated Jan 22, 2026

Search Tags:#analyze #security-audit #multisig #on-chain-disclosures #spl-token #token-governance

Ready to run

npx skills add https://github.com/SanctifiedOps/solana-skills --skill token-authority-and-risk

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: token-authority-and-risk
Source: https://github.com/SanctifiedOps/solana-skills/tree/main/skills/tokens/token-authority-and-risk
Command: npx skills add https://github.com/SanctifiedOps/solana-skills --skill token-authority-and-risk

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps token projects and auditors understand and control SPL token authorities (mint, freeze, close), reducing governance risk and improving transparency.

Core Features & Use Cases

Inventory current authorities for mint, freeze, and close and identify custody methods.
Propose posture options: revoke, rotate to multisig/PDA, or maintain with policy.
Implement changes via SPL Token program instructions and record txids.
Documentation and disclosures: publish authority logs to enable verification and compliance.
Monitoring: set up alerts for authority changes and large mint/burn events.

Quick Start

Inventory current authorities with spl-token account-info and on-chain explorers; decide posture (revoke/rotate/keep); execute changes with spl-token authorize for mint, freeze, and close; record all txids and publish the policy; monitor ongoing activity.

Frequently Asked Questions about token-authority-and-risk

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit SPL token authorities for mint, freeze, and close accounts?▼

To audit SPL token authorities, inventory current mint, freeze, and close custody methods using spl-token account-info and on-chain explorers to clarify control and identify governance risk for token projects.

What is the best way to rotate SPL token mint authority to a multisig?▼

Rotating SPL token mint authority to a multisig involves deciding your custody posture, then executing the transfer using the spl-token authorize command and recording the resulting transaction hash for disclosure.

How do I document on-chain disclosures for SPL token governance changes?▼

Document on-chain disclosures by recording all transaction hashes from authority changes and publishing authority logs, enabling public verification and compliance for token project transparency.

Can I revoke freeze authority on an SPL token without removing mint authority?▼

Yes, you can revoke freeze authority independently by executing spl-token authorize for the freeze account specifically, maintaining mint authority while adjusting governance posture to reduce risk.

Does this approach work for SPL tokens using PDA custody strategies?▼

Yes, the process applies to SPL tokens using PDA custody strategies by inventorying current authorities and proposing posture options like rotating to a PDA or multisig to improve governance control.

Why should I monitor SPL token authority changes after an initial security audit?▼

Monitoring SPL token authority changes after a security audit is necessary to detect unauthorized modifications and large mint or burn events, ensuring ongoing token governance compliance and risk control.