Token Authority And Risk
This skill analyzes token usage patterns to identify potential security risks and unauthorized activity, bolstering system authority protection.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add token-authority-and-risk npx -- -y @trustedskills/token-authority-and-risk
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"token-authority-and-risk": {
"command": "npx",
"args": [
"-y",
"@trustedskills/token-authority-and-risk"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill allows AI agents to analyze Solana token programs and determine the authority required for specific actions, as well as assess potential risks associated with those actions. It can identify mint authorities, freeze authorities, and other critical permissions within a token program's configuration. The skill provides insights into who controls a token’s behavior and highlights potential vulnerabilities or areas of concern.
When to use it
- Due Diligence: Before investing in a Solana token, understand the authority structure and associated risks.
- Security Audits: Identify potential security flaws related to token control and permissions.
- Smart Contract Development: Determine necessary authorities for deploying or interacting with token programs.
- Incident Response: Investigate unauthorized actions by understanding who has the power to perform them.
Key capabilities
- Identify mint authority
- Detect freeze authority
- Analyze token program configuration
- Assess associated risks
Example prompts
- "What is the mint authority for Token ABC?"
- "Can you identify any freeze authorities associated with this Solana token program?"
- “Describe the potential risks if the mint authority for Token XYZ is compromised.”
Tips & gotchas
This skill requires a deep understanding of Solana token programs and their configurations. The accuracy of the analysis depends on the availability and correctness of on-chain data.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.