BSC audit skills
Two skills for due diligence on BNB Smart Chain tokens, NFT mints and launches: on-chain proof and a GO, CAUTION or BLOCK call.
- 59 ★ on the repository
- Last commit
- MIT
Extended access
Why this level
- The skills run scripts and call public nodes and audit services, and the verdict does not guarantee the safety of a deal
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/bsc-audit-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The skills run scripts and call public nodes and audit services, and the verdict does not guarantee the safety of a deal
This is third-party code. Review the repository files before installing.
What it does
A pair of skills for due diligence on BNB Smart Chain (chain 56). `bsc-contract-audit` looks at what you end up holding: a BEP-20 token, a BEP-721 or BEP-1155 NFT mint, or a lock that refunds a deposit. `launch-curve-audit` reviews the sale mechanism before launch: the bonding curve, admission and escrow, graduation to a liquidity pool and coupled emissions. Both skills rely on on-chain state rather than the project homepage and keep a block-pinned log of findings. The scripts are Python plus `curl` with `jq` and are read-only. The result is one line, `DECISION: GO | CAUTION | BLOCK`, which an agent wallet can use as a gate before acting. On the 100-point score BLOCK is below 55, CAUTION is 55 to 84 and GO is 85 or higher.
Who it is for. Users of wallet-enabled agents and researchers who want an on-chain check before buying a token or joining a launch on BNB Smart Chain.
Good fit when
- Before buying a token you need to check the code, owner rights and holder concentration
- For an NFT mint the contract and terms should be compared with what the site promises
- A deposit-refund lock must really return money according to chain state
- A bonding-curve launch is checked for economics, admission and graduation to liquidity
Not a fit when
- Investment advice or a guarantee is needed, which a report does not give since chain state changes
- The contract is not on BNB Smart Chain, since the skills target chain 56
- Automated buying or trading is needed, while the scripts only read data
Example request
Audit the token at this address on BNB Smart Chain: owner rights, holders, source code. Finish with a DECISION line.Limitations
A report is reference material, not investment advice: a clean result is no guarantee and chain state changes. The authors are independent and not affiliated with Binance or Anthropic. A BSC node address is needed in `RPC_URL`, and `ETHERSCAN_KEY` can be set for source lookup. Paid APIs are not required and GoPlus is optional, but a low-cost stack can be built from a premium node, an Etherscan key, Sourcify, honeypot.is and the public Binance Web3 audit. Holder concentration is rebuilt from transfer logs and escrow pool integrity is checked by `rpc.py nbal`.
How to disable. Delete the `bsc-contract-audit` and `launch-curve-audit` folders from the agent skills directory. Remove `RPC_URL` and `ETHERSCAN_KEY` from the environment if no longer needed.
FAQ
How do the two skills differ?
`bsc-contract-audit` audits the asset and escrow from the buyer’s side and `launch-curve-audit` reviews the sale mechanism before launch. A full review often runs both.
What does the DECISION line mean?
`GO` may proceed, `CAUTION` needs the user to acknowledge ranked findings and `BLOCK` means refusing the buy, swap, mint or lock.
Are paid services needed?
No. A premium node, a free Etherscan key, Sourcify, honeypot.is and the public Binance Web3 audit are enough, and GoPlus is optional.
What if the fast and deep audits disagree?
The stricter result wins. The quick `query-token-audit` check and the deep review are reconciled before the final line.
Do the scripts write to the chain?
No, the scripts only read data: dependency-free Python plus `curl` with `jq`. No transactions are sent.
Discussion
No questions or reviews yet.
Related
SkillsA plugin audits Solana programs and surrounding code against 1,465 items and 141 known attacks and writes a report.
Skill that scans a project for common vibe-coding holes: keys in code, .env in git, open LLM endpoints and weak auth.
A skill set for smart contract auditing: bug classes, grep patterns, Foundry PoCs and an Immunefi report format.
A security scanner for agent skills: finds prompt injection, data exfiltration and malicious code before you install
A code security audit skill by Cloudflare: the agent runs recon, coverage-led hunting and independent verification of findings, then produces a structured repor
Security audit skill with GOST and FSTEC
Security Audit Skill for Claude Code
A security audit skill for Claude Code: OWASP Top 10 plus GOST R 56939, FSTEC Order No. 21 and 152-FZ, parallel subagents and a compliance matrix
README in short
Both skills follow one discipline: evidence over claims and on-chain state over the homepage. Findings are pinned to a block and ranked by severity.