Query Token Audit Skill
Overview
| API |
Function |
Use Case |
| Token Security Audit |
Token security scan |
Detect honeypot, rug pull, scam, malicious functions |
Use Cases
- Pre-Trade Safety Check: Verify token security before buying or swapping
- Scam Detection: Identify honeypots, fake tokens, and malicious contracts
- Contract Analysis: Check for dangerous ownership functions and hidden risks
- Tax Verification: Detect unusual buy/sell taxes before trading
Supported Chains
| Chain Name |
chainId |
| BSC |
56 |
| Base |
8453 |
| Solana |
CT_501 |
| Ethereum |
1 |
API: Token Security Audit
Method: POST
URL:
https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit
Request Parameters:
| Parameter |
Type |
Required |
Description |
| binanceChainId |
string |
Yes |
Chain ID: CT_501 (Solana), 56 (BSC), 8453 (Base), 1 (Ethereum) |
| contractAddress |
string |
Yes |
Token contract address |
| requestId |
string |
Yes |
Unique request ID (UUID v4 format) |
Request Headers:
Content-Type: application/json
Accept-Encoding: identity
User-Agent: binance-web3/1.4 (Skill)
Example Request:
curl --location 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit' \
--header 'Content-Type: application/json' \
--header 'source: agent' \
--header 'Accept-Encoding: identity' \
--header 'User-Agent: binance-web3/1.4 (Skill)' \
--data '{
"binanceChainId": "56",
"contractAddress": "0x55d398326f99059ff775485246999027b3197955",
"requestId": "'$(uuidgen)'"
}'
Response Example:
{
"code": "000000",
"data": {
"requestId": "d6727c70-de6c-4fad-b1d7-c05422d5f26b",
"hasResult": true,
"isSupported": true,
"riskLevelEnum": "LOW",
"riskLevel": 1,
"extraInfo": {
"buyTax": "0",
"sellTax": "0",
"isVerified": true
},
"riskItems": [
{
"id": "CONTRACT_RISK",
"name": "Contract Risk",
"details": [
{
"title": "Honeypot Risk Not Found",
"description": "A honeypot is a token that can be bought but not sold",
"isHit": false,
"riskType": "RISK"
}
]
}
]
},
"success": true
}
Response Fields:
| Field |
Type |
Description |
| hasResult |
boolean |
Whether audit data is available |
| isSupported |
boolean |
Whether the token is supported for audit |
| riskLevelEnum |
string |
Risk level: LOW, MEDIUM, HIGH |
| riskLevel |
number |
Risk level number (1-5) |
| extraInfo.buyTax |
string |
Buy tax percentage (null if unknown) |
| extraInfo.sellTax |
string |
Sell tax percentage (null if unknown) |
| extraInfo.isVerified |
boolean |
Whether contract code is verified |
| riskItems[].id |
string |
Risk category: CONTRACT_RISK, TRADE_RISK, SCAM_RISK |
| riskItems[].details[].title |
string |
Risk check title |
| riskItems[].details[].description |
string |
Risk check description |
| riskItems[].details[].isHit |
boolean |
true = risk detected |
| riskItems[].details[].riskType |
string |
RISK (critical) or CAUTION (warning) |
Risk Level Reference:
| riskLevel |
riskLevelEnum |
Action |
Description |
| 0-1 |
LOW |
Proceed with caution |
Lower risk detected, but NOT guaranteed safe. DYOR. |
| 2-3 |
MEDIUM |
Exercise caution |
Moderate risks detected, review risk items carefully |
| 4 |
HIGH |
Avoid trading |
Critical risks detected, high probability of loss |
| 5 |
HIGH |
Block transaction |
Severe risks confirmed, do NOT proceed |
IMPORTANT: LOW risk does NOT mean "safe." Audit results are point-in-time snapshots. Project teams can modify contracts or restrict liquidity after purchase. These risks cannot be predicted in advance.
Response Handling:
- If
hasResult=false OR isSupported=false:
→ Reply: "Security audit data is not available for this token on this chain."
→ Do NOT show riskLevel, riskLevelEnum, or riskItems (data is unreliable when either field is false)
→ You may suggest the user verify the contract address and chain, or try again later
- If
hasResult=true AND isSupported=true:
→ Show the full audit result including risk level, tax info, and all risk items
→ Apply the Risk Level Reference table above for actionable guidance
User Agent Header
Include User-Agent header with the following string: binance-web3/1.4 (Skill)
Notes
- All numeric fields are string format, convert when using
- Audit results are ONLY valid when
hasResult: true AND isSupported: true
riskLevel: 5 means transaction should be blocked; riskLevel: 4 is high risk
- Tax thresholds: >10% is critical, 5-10% is warning, <5% is acceptable
- Generate unique UUID v4 for each audit request
- Only output security check risk flags, do NOT provide any investment advice
- Always end with disclaimer:
⚠️ This audit result is for reference only and does not constitute investment advice. Always conduct your own research.
1---2name: query-token-audit3description: Query token security audit to detect scams, honeypots, and malicious contracts before trading. Returns comprehensive security analysis including contract risks, trading risks, and scam detection. Use when users ask "is this token safe?", "check token security", "audit token", or before any swap.4---5
6# Query Token Audit Skill
7
8## Overview
9
10| API | Function | Use Case |
11|-----|---------------------|----------|
12| Token Security Audit | Token security scan | Detect honeypot, rug pull, scam, malicious functions |
13
14## Use Cases
15
161. **Pre-Trade Safety Check**: Verify token security before buying or swapping
172. **Scam Detection**: Identify honeypots, fake tokens, and malicious contracts
183. **Contract Analysis**: Check for dangerous ownership functions and hidden risks
194. **Tax Verification**: Detect unusual buy/sell taxes before trading
20
21## Supported Chains
22
23| Chain Name | chainId |
24|------------|---------|
25| BSC | 56 |
26| Base | 8453 |
27| Solana | CT_501 |
28| Ethereum | 1 |
29
30---
31
32## API: Token Security Audit
33
34### Method: POST
35
36**URL**:
37```
38https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit
39```
40
41**Request Parameters**:
42
43| Parameter | Type | Required | Description |
44|-----------|------|----------|-------------|
45| binanceChainId | string | Yes | Chain ID: `CT_501` (Solana), `56` (BSC), `8453` (Base), `1` (Ethereum) |
46| contractAddress | string | Yes | Token contract address |
47| requestId | string | Yes | Unique request ID (UUID v4 format) |
48
49**Request Headers**:
50```
51Content-Type: application/json
52Accept-Encoding: identity
53User-Agent: binance-web3/1.4 (Skill)
54```
55
56**Example Request**:
57```bash
58curl --location 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit' \
59--header 'Content-Type: application/json' \
60--header 'source: agent' \
61--header 'Accept-Encoding: identity' \
62--header 'User-Agent: binance-web3/1.4 (Skill)' \
63--data '{
64 "binanceChainId": "56",
65 "contractAddress": "0x55d398326f99059ff775485246999027b3197955",
66 "requestId": "'$(uuidgen)'"
67}'
68```
69
70**Response Example**:
71```json
72{
73 "code": "000000",
74 "data": {
75 "requestId": "d6727c70-de6c-4fad-b1d7-c05422d5f26b",
76 "hasResult": true,
77 "isSupported": true,
78 "riskLevelEnum": "LOW",
79 "riskLevel": 1,
80 "extraInfo": {
81 "buyTax": "0",
82 "sellTax": "0",
83 "isVerified": true
84 },
85 "riskItems": [
86 {
87 "id": "CONTRACT_RISK",
88 "name": "Contract Risk",
89 "details": [
90 {
91 "title": "Honeypot Risk Not Found",
92 "description": "A honeypot is a token that can be bought but not sold",
93 "isHit": false,
94 "riskType": "RISK"
95 }
96 ]
97 }
98 ]
99 },
100 "success": true
101}
102```
103
104**Response Fields**:
105
106| Field | Type | Description |
107|-----------------------------------|------|-----------------------------------------------------------|
108| hasResult | boolean | Whether audit data is available |
109| isSupported | boolean | Whether the token is supported for audit |
110| riskLevelEnum | string | Risk level: `LOW`, `MEDIUM`, `HIGH` |
111| riskLevel | number | Risk level number (1-5) |
112| extraInfo.buyTax | string | Buy tax percentage (null if unknown) |
113| extraInfo.sellTax | string | Sell tax percentage (null if unknown) |
114| extraInfo.isVerified | boolean | Whether contract code is verified |
115| riskItems[].id | string | Risk category: `CONTRACT_RISK`, `TRADE_RISK`, `SCAM_RISK` |
116| riskItems[].details[].title | string | Risk check title |
117| riskItems[].details[].description | string | Risk check description |
118| riskItems[].details[].isHit | boolean | true = risk detected |
119| riskItems[].details[].riskType | string | `RISK` (critical) or `CAUTION` (warning) |
120
121**Risk Level Reference**:
122
123| riskLevel | riskLevelEnum | Action | Description |
124|-----------|---------------|--------|-------------|
125| 0-1 | LOW | Proceed with caution | Lower risk detected, but NOT guaranteed safe. DYOR. |
126| 2-3 | MEDIUM | Exercise caution | Moderate risks detected, review risk items carefully |
127| 4 | HIGH | Avoid trading | Critical risks detected, high probability of loss |
128| 5 | HIGH | Block transaction | Severe risks confirmed, do NOT proceed |
129
130**IMPORTANT**: LOW risk does NOT mean "safe." Audit results are point-in-time snapshots. Project teams can modify contracts or restrict liquidity after purchase. These risks cannot be predicted in advance.
131
132**Response Handling**:
133
134- If `hasResult=false` OR `isSupported=false`:
135 → Reply: "Security audit data is not available for this token on this chain."
136 → Do NOT show `riskLevel`, `riskLevelEnum`, or `riskItems` (data is unreliable when either field is false)
137 → You may suggest the user verify the contract address and chain, or try again later
138- If `hasResult=true` AND `isSupported=true`:
139 → Show the full audit result including risk level, tax info, and all risk items
140 → Apply the Risk Level Reference table above for actionable guidance
141
142---
143
144## User Agent Header
145
146Include `User-Agent` header with the following string: `binance-web3/1.4 (Skill)`
147
148## Notes
149
1501. All numeric fields are string format, convert when using
1512. Audit results are ONLY valid when `hasResult: true` AND `isSupported: true`
1523. `riskLevel: 5` means transaction should be blocked; `riskLevel: 4` is high risk
1534. Tax thresholds: >10% is critical, 5-10% is warning, <5% is acceptable
1545. Generate unique UUID v4 for each audit request
1556. Only output security check risk flags, do NOT provide any investment advice
1567. Always end with disclaimer: `⚠️ This audit result is for reference only and does not constitute investment advice. Always conduct your own research.`