query-token-audit

What this skill does

# Query Token Audit Skill

## Overview

| API | Function            | Use Case |
|-----|---------------------|----------|
| Token Security Audit | Token security scan | Detect honeypot, rug pull, scam, malicious functions |

## Use Cases

1. **Pre-Trade Safety Check**: Verify token security before buying or swapping
2. **Scam Detection**: Identify honeypots, fake tokens, and malicious contracts
3. **Contract Analysis**: Check for dangerous ownership functions and hidden risks
4. **Tax Verification**: Detect unusual buy/sell taxes before trading

## Supported Chains

| Chain Name | chainId |
|------------|---------|
| BSC | 56 |
| Base | 8453 |
| Solana | CT_501 |
| Ethereum | 1 |

---

## API: Token Security Audit

### Method: POST

**URL**: 
```
https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit
```

**Request Parameters**:

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| binanceChainId | string | Yes | Chain ID: `CT_501` (Solana), `56` (BSC), `8453` (Base), `1` (Ethereum) |
| contractAddress | string | Yes | Token contract address |
| requestId | string | Yes | Unique request ID (UUID v4 format) |

**Request Headers**:
```
Content-Type: application/json
Accept-Encoding: identity
User-Agent: binance-web3/1.4 (Skill)
```

**Example Request**:
```bash
curl --location 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit' \
--header 'Content-Type: application/json' \
--header 'source: agent' \
--header 'Accept-Encoding: identity' \
--header 'User-Agent: binance-web3/1.4 (Skill)' \
--data '{
    "binanceChainId": "56",
    "contractAddress": "0x55d398326f99059ff775485246999027b3197955",
    "requestId": "'$(uuidgen)'"
}'
```

**Response Example**:
```json
{
    "code": "000000",
    "data": {
        "requestId": "d6727c70-de6c-4fad-b1d7-c05422d5f26b",
        "hasResult": true,
        "isSupported": true,
        "riskLevelEnum": "LOW",
        "riskLevel": 1,
        "extraInfo": {
            "buyTax": "0",
            "sellTax": "0",
            "isVerified": true
        },
        "riskItems": [
            {
                "id": "CONTRACT_RISK",
                "name": "Contract Risk",
                "details": [
                    {
                        "title": "Honeypot Risk Not Found",
                        "description": "A honeypot is a token that can be bought but not sold",
                        "isHit": false,
                        "riskType": "RISK"
                    }
                ]
            }
        ]
    },
    "success": true
}
```

**Response Fields**:

| Field                             | Type | Description                                               |
|-----------------------------------|------|-----------------------------------------------------------|
| hasResult                         | boolean | Whether audit data is available                           |
| isSupported                       | boolean | Whether the token is supported for audit                  |
| riskLevelEnum                     | string | Risk level: `LOW`, `MEDIUM`, `HIGH`                       |
| riskLevel                         | number | Risk level number (1-5)                                   |
| extraInfo.buyTax                  | string | Buy tax percentage (null if unknown)                      |
| extraInfo.sellTax                 | string | Sell tax percentage (null if unknown)                     |
| extraInfo.isVerified              | boolean | Whether contract code is verified                         |
| riskItems[].id                    | string | Risk category: `CONTRACT_RISK`, `TRADE_RISK`, `SCAM_RISK` |
| riskItems[].details[].title       | string | Risk check title                                          |
| riskItems[].details[].description | string | Risk check description                                    |
| riskItems[].details[].isHit       | boolean | true = risk detected                                      |
| riskItems[].details[].riskType    | string | `RISK` (critical) or `CAUTION` (warning)                  |

**Risk Level Reference**:

| riskLevel | riskLevelEnum | Action | Description |
|-----------|---------------|--------|-------------|
| 0-1 | LOW | Proceed with caution | Lower risk detected, but NOT guaranteed safe. DYOR. |
| 2-3 | MEDIUM | Exercise caution | Moderate risks detected, review risk items carefully |
| 4 | HIGH | Avoid trading | Critical risks detected, high probability of loss |
| 5 | HIGH | Block transaction | Severe risks confirmed, do NOT proceed |

**IMPORTANT**: LOW risk does NOT mean "safe." Audit results are point-in-time snapshots. Project teams can modify contracts or restrict liquidity after purchase. These risks cannot be predicted in advance.

**Response Handling**:

- If `hasResult=false` OR `isSupported=false`:
  → Reply: "Security audit data is not available for this token on this chain."
  → Do NOT show `riskLevel`, `riskLevelEnum`, or `riskItems` (data is unreliable when either field is false)
  → You may suggest the user verify the contract address and chain, or try again later
- If `hasResult=true` AND `isSupported=true`:
  → Show the full audit result including risk level, tax info, and all risk items
  → Apply the Risk Level Reference table above for actionable guidance

---

## User Agent Header

Include `User-Agent` header with the following string: `binance-web3/1.4 (Skill)`

## Notes

1. All numeric fields are string format, convert when using
2. Audit results are ONLY valid when `hasResult: true` AND `isSupported: true`
3. `riskLevel: 5` means transaction should be blocked; `riskLevel: 4` is high risk
4. Tax thresholds: >10% is critical, 5-10% is warning, <5% is acceptable
5. Generate unique UUID v4 for each audit request
6. Only output security check risk flags, do NOT provide any investment advice 
7. Always end with disclaimer: `⚠️ This audit result is for reference only and does not constitute investment advice. Always conduct your own research.`