# Query Token Audit

> Use this skill when checking token security before swaps or trades, including honeypot risk, scam indicators, malicious contract functions, dangerous ownership settings, unusual taxes, and supported-chain audit data.

- Skill: `chatandbuild/query-token-audit` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add chatandbuild/query-token-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/chatandbuild/query-token-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: ChatAndBuild (https://skillmd.com/u/chatandbuild)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/chatandbuild/query-token-audit

---


# Query Token Audit Skill

## Overview

| API | Function | Use Case |
|-----|----------|----------|
| Token Security Audit | Token security scan | Detect honeypot, rug pull, scam, malicious functions |

## Use Cases

1. **Pre-Trade Safety Check**: Verify token security before buying or swapping
2. **Scam Detection**: Identify honeypots, fake tokens, and malicious contracts
3. **Contract Analysis**: Check for dangerous ownership functions and hidden risks
4. **Tax Verification**: Detect unusual buy/sell taxes before trading

## Supported Chains

| Chain Name | chainId |
|------------|---------|
| BSC | 56 |
| Base | 8453 |
| Solana | CT_501 |
| Ethereum | 1 |

---

## API: Token Security Audit

### Method: POST

**URL**:
`https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit`

**Request Parameters**:

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| binanceChainId | string | Yes | Chain ID: `CT_501` (Solana), `56` (BSC), `8453` (Base), `1` (Ethereum) |
| contractAddress | string | Yes | Token contract address |
| requestId | string | Yes | Unique request ID (UUID v4 format) |

**Request Headers**:
```text
Content-Type: application/json
Accept-Encoding: identity
```

**Example Request**:
```bash
curl --location 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit' \
--header 'Content-Type: application/json' \
--header 'source: agent' \
--header 'Accept-Encoding: identity' \
--data '{
  "binanceChainId": "56",
  "contractAddress": "0x55d398326f99059ff775485246999027b3197955",
  "requestId": "'$(uuidgen)'"
}'
```

**Response Example**:
```json
{
  "code": "000000",
  "data": {
    "requestId": "d6727c70-de6c-4fad-b1d7-c05422d5f26b",
    "hasResult": true,
    "isSupported": true,
    "riskLevelEnum": "LOW",
    "riskLevel": 1,
    "extraInfo": {
      "buyTax": "0",
      "sellTax": "0",
      "isVerified": true
    },
    "riskItems": [
      {
        "id": "CONTRACT_RISK",
        "name": "Contract Risk",
        "details": [
          {
            "title": "Honeypot Risk Not Found",
            "description": "A honeypot is a token that can be bought but not sold",
            "isHit": false,
            "riskType": "RISK"
          }
        ]
      }
    ]
  },
  "success": true
}
```

**Response Fields**:

| Field | Type | Description |
|-------|------|-------------|
| hasResult | boolean | Whether audit data is available |
| isSupported | boolean | Whether the token is supported for audit |
| riskLevelEnum | string | Risk level: `LOW`, `MEDIUM`, `HIGH` |
| riskLevel | number | Risk level number (1-5) |
| extraInfo.buyTax | string | Buy tax percentage (null if unknown) |
| extraInfo.sellTax | string | Sell tax percentage (null if unknown) |
| extraInfo.isVerified | boolean | Whether contract code is verified |
| riskItems[].id | string | Risk category: `CONTRACT_RISK`, `TRADE_RISK`, `SCAM_RISK` |
| riskItems[].details[].title | string | Risk check title |
| riskItems[].details[].description | string | Risk check description |
| riskItems[].details[].isHit | boolean | true = risk detected |
| riskItems[].details[].riskType | string | `RISK` (critical) or `CAUTION` (warning) |

**Risk Level Reference**:

| riskLevel | riskLevelEnum | Action | Description |
|-----------|---------------|--------|-------------|
| 0-1 | LOW | Proceed with caution | Lower risk detected, but not guaranteed safe. DYOR. |
| 2-3 | MEDIUM | Exercise caution | Moderate risks detected, review risk items carefully |
| 4 | HIGH | Avoid trading | Critical risks detected, high probability of loss |
| 5 | HIGH | Block transaction | Severe risks confirmed, do not proceed |

**IMPORTANT**: LOW risk does not mean "safe." Audit results are point-in-time snapshots. Project teams can modify contracts or restrict liquidity after purchase. These risks cannot be predicted in advance.

**Result Validity**:

Audit results are valid only when both conditions are met:
- `hasResult: true` - Audit data is available
- `isSupported: true` - Token is supported for audit

When invalid, do not display risk level or security checks.

---

## Notes

1. All numeric fields may be returned in string format; convert when needed
2. Audit results are valid only when `hasResult: true` and `isSupported: true`
3. `riskLevel: 5` means transaction should be blocked; `riskLevel: 4` is high risk
4. Tax thresholds: above 10% is critical, 5-10% is warning, below 5% is acceptable
5. Generate a unique UUID v4 for each audit request
6. Output only security check risk flags; do not provide investment advice
7. Always end with this disclaimer: `This audit result is for reference only and does not constitute investment advice. Always conduct your own research.`