Requires immutable curve parameters and permissionless graduation
Identifies swapExactTokensForETH calls configured with zero minimum output amounts
and 5 more in the full report
8 fixed12 passed either way2 still failing0 broke
Pass-rate lift
+36 pp
Tokens
+100%
Agent turns
0%
Response time
-15%
Model gemini-3.6-flashMeasured 8/10/2026v120 of 22 cases passed with skill · 21 comparable
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 7
Prompt
What terminal command runs a static analysis security scan on a single Solidity file located at `contracts/Token.sol` using Python static analysis tooling?
case-14 · gemini-3.6-flash · 8/10/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md289 linessingle file
MEME COIN & TOKEN SECURITY AUDIT
Fast-kill rug pull detection and deep token security analysis for EVM and Solana meme coins.
PRE-DIVE KILL SIGNALS
Check these BEFORE reading a single line of code. If any are true, skip the audit — the token is likely a rug or not worth the time.
Hard Kills (Skip Immediately)
Contract not verified on Etherscan/Solscan → Cannot audit source = cannot trust
Deployer wallet has history of rug pulls (check Etherscan deployer page)
Token age < 1 hour AND no known team → Too early, wait for more data
Mint authority retained (Solana) AND no cap → Infinite mint = certain rug
Freeze authority retained (Solana) on meme coin → Honeypot confirmed
Transfer hook present (Token-2022) with mutable hook program → Honeypot vector
Permanent delegate extension (Token-2022) → Can steal all holder tokens
Soft Kills (Proceed with Extreme Caution)
Top holder > 20% of supply (excluding DEX pools)
LP not burned or locked in verified contract
Contract is upgradeable / proxy with retained admin
Less than $5K liquidity in the pool
No social presence / anonymous deployer with no history
THE ONE RULE
"Check ALL authorities and owner functions. The retained authority IS the rug vector."
Every rug pull requires a privileged operation: mint, blacklist, fee change, LP removal, or authority abuse. If you find the privilege, you found the bug.
BUG CLASSES (8 TOKEN-SPECIFIC)
1. HIDDEN MINT / UNLIMITED SUPPLY
35% of meme coin rugs. Deployer mints tokens post-launch, dumps on LP.