meme-coin-audit

Detects rug pull vectors and authority risks in EVM and Solana token contracts.

Updated May 29, 2026
One-click install
npx skills add https://github.com/hhjkjkjk/Claude-skills --skill meme-coin-audit-hhjkjkjk
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: meme-coin-audit
Source: https://github.com/hhjkjkjk/Claude-skills/tree/main/skills/meme-coin-audit
Command: npx skills add https://github.com/hhjkjkjk/Claude-skills --skill meme-coin-audit-hhjkjkjk

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Meme coin investors and security researchers need a fast, systematic way to determine whether a token contract contains rug pull mechanisms—hidden mints, honeypots, fee manipulation, or retained Solana authorities—before committing funds or writing audit reports. ## Core Features & Use Cases - Pre-dive kill signals: Hard and soft kill criteria (unverified contracts, retained mint/freeze authority, Token-2022 transfer hooks, permanent delegates) to skip doomed audits immediately. - 8 token-specific bug classes: Grep-based detection patterns for hidden mints, honeypots, fee manipulation, LP drains, bonding curve exploits, authority retention, fake renounces, and sandwich amplification on both EVM and Solana. - Foundry PoC templates and Solana on-chain checks: Ready-made exploit test contracts plus authority verification commands (spl-token display, solana account) that work without source code. - Use Case: Before buying a new pump.fun token, run the 6-question fast filter—mint authority null, freeze authority null, LP locked over 6 months, top-10 concentration under 30%—to decide in under 5 minutes whether to walk away. ## Quick Start Audit this Solana token mint address for retained authorities, Token-2022 extension risks, and rug pull signals, then give me a pass/fail verdict.

Frequently Asked Questions about meme-coin-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a Solana token is a rug pull?▼

Check the mint authority, freeze authority, and update authority using solana account or spl-token display commands. If mint or freeze authority is non-null, the deployer can mint infinite tokens or freeze holder accounts, which are critical rug signals.

How to detect a honeypot token before buying?▼

Simulate a buy, then a transfer to a second wallet, then a sell. If buy and transfer succeed but sell fails or applies over 50% tax, it is a honeypot. Cross-verify with rugcheck.xyz, honeypot.is, and dexscreener risk signals.

What are Token-2022 transfer hook risks on Solana?▼

Token-2022 transfer hooks let an authority pause, blacklist, or tax arbitrary addresses after launch. If the hook authority or permanent delegate is non-null, that key holder can revoke transfer rights or move any holder's tokens, which is rug-class risk.

Does LP locked on DexScreener mean the liquidity is safe?▼

No. LP-lock badges require on-chain verification of the actual lock contract. Check the unlock timestamp, lock owner, and whether the contract allows shortening the lock, since some locks are one-day locks renewed weekly.

What are the limitations of automated token scanner tools?▼

Regex-based scanners catch code patterns like mint functions and blacklist mappings but cannot check on-chain state, holder distribution, LP lock status, or deployer wallet history. Those require manual checks via Etherscan, Solscan, Birdeye, and lock contract explorers.