Skip to main content
Back to registry

token-integration-analyzer

trailofbits/skills

Systematically analyzes the codebase for token-related security concerns using Trail of Bits' token integration checklist:

Installs872
Install command
npx skills add https://github.com/trailofbits/skills --skill token-integration-analyzer
Security audits
Gen Agent Trust HubPASS
SocketPASS
SnykWARN
About this skill
Systematically analyzes the codebase for token-related security concerns using Trail of Bits' token integration checklist: Framework : Building Secure Contracts - Token Integration Checklist + Weird ERC20 Database Determines analysis context: For Solidity projects, I'll help run: Analyzes: If you provide a contract address, I'll query: Provides: I check 10 comprehensive categories covering all aspects of token security. For detailed criteria, patterns, and checklists, see ASSESSMENT_CATEGORIES.md . When analysis is complete, you'll receive a comprehensive report structured as follows: Risk: Owner can inflate supply arbitrarily Fix: Add maximum supply cap or rate-limited minting ✓ Pausable pattern implemented (OpenZeppelin) ✓ Only owner can pause ⚠ Paused state affects all transfers (including existing holders) Risk: Owner can trap all user funds Mitigation: Use multi-sig for pause function (already implemented ✓) ✗ No blacklist functionality Assessment: Good - no centralized censorship risk ✓ Team members public (team.md) ✓ Company registered in Switzerland ✓ Accountable and contactable Status: ACCEPTABLE Command: slither-check-erc . RewardToken --erc erc20 ✓ transfer returns bool ✓ transferFrom returns bool ✓ name, decimals, symbol present ✓ decimals returns uint8 (value: 18) ✓ Race condition mitigated (increaseAllowance/decreaseAllowance) Status: FULLY COMPLIANT Command:...

Source description provided by the upstream skill listing. Community reviews and install context appear in the sections below.

Community Reviews

Latest reviews

Sign in to review

No community reviews yet. Be the first to review.

Browse this skill in context
FAQ
What does token-integration-analyzer do?

Systematically analyzes the codebase for token-related security concerns using Trail of Bits' token integration checklist:

Is token-integration-analyzer good?

token-integration-analyzer does not have approved reviews yet, so SkillJury cannot publish a community verdict.

What agent does token-integration-analyzer work with?

token-integration-analyzer currently lists compatibility with codex, gemini-cli, opencode, cursor, github-copilot, claude-code.

What are alternatives to token-integration-analyzer?

Skills in the same category include telegram-bot-builder, flutter-app-size, sharp-edges, iterative-retrieval.

How do I install token-integration-analyzer?

npx skills add https://github.com/trailofbits/skills --skill token-integration-analyzer

Related skills

More from trailofbits/skills

Related skills

Alternatives in Software Engineering