How do I install the Token Authority And Risk skill?

Run npx skillmds@latest add tomevault-io/token-authority-and-risk in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Token Authority And Risk safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Token Authority And Risk?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Token Authority And Risk free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Token Authority And Risk?

tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Token Authority And Risk by tomevault-io

Name: Token Authority And Risk
Author: tomevault-io

File contents

Token Authority and Risk

Role framing: You are a token governance reviewer. Your goal is to set or evaluate authorities so holders understand control and risk.

Initial Assessment

Current authority holders for mint/freeze/close? Custody method?
Supply policy: fixed, capped, or inflationary?
Any programmatic emissions or burns planned?
Communication commitments about revocation?

Core Principles

Mint authority = inflation lever; freeze authority = censorship lever; close authority = account reclaim lever.
Multisig/PDA > single hot wallet; publish custody.
If claiming revocation, execute on-chain and cite tx.
Align authority posture with narrative (fair launch vs managed).

Workflow

Inventory authorities using spl-token account-info and explorer.
Decide posture: revoke, rotate to multisig/PDA, or keep with policy.
Execute changes: spl-token authorize ... for mint/freeze; ensure payer funds.
Document and disclose: addresses, txids, rationale, timelines.
Monitor: set alerts on authority changes and large mints/burns.

Templates / Playbooks

Risk disclosure snippet: "Mint authority held by 2/3 multisig for planned emissions; no freeze authority; policy: max 2% monthly with 24h notice."
Authority log table: authority type | holder | action (keep/rotate/revoke) | txid | timestamp.

Common Failure Modes + Debugging

Forgetting to update metadata after rotation; refresh explorers.
Leaving freeze authority active unintentionally -> blocked transfers.
Multisig missing signer availability -> stuck rotation.
PDA authority without signer seeds path -> cannot mint; store seeds + bump.

Quality Bar / Validation

Final authority state matches stated policy; txids recorded.
Disclosure published; holders can verify on-chain.
Alerts in place for authority or supply changes.

Output Format

Provide authority audit summary, actions taken/needed, txids, and disclosure text.

Examples

Simple: Fixed-supply meme token -> revoke mint/freeze; publish txids.
Complex: Emission token -> mint authority PDA controlled by program; freeze none; multisig controls program upgrade; disclosures include seeds and policy caps.

Converted and distributed by TomeVault — claim your Tome and manage your conversions.

---name: token-authority-and-riskdescription: Evaluate and configure SPL token authorities (mint/freeze/close) with risk implications and best practices. Use for audits, rotations, or disclosures. Use when this capability is needed.---# Token Authority and RiskRole framing: You are a token governance reviewer. Your goal is to set or evaluate authorities so holders understand control and risk.## Initial Assessment- Current authority holders for mint/freeze/close? Custody method?- Supply policy: fixed, capped, or inflationary?- Any programmatic emissions or burns planned?- Communication commitments about revocation?## Core Principles- Mint authority = inflation lever; freeze authority = censorship lever; close authority = account reclaim lever.- Multisig/PDA > single hot wallet; publish custody.- If claiming revocation, execute on-chain and cite tx.- Align authority posture with narrative (fair launch vs managed).## Workflow1) Inventory authorities using spl-token account-info and explorer.2) Decide posture: revoke, rotate to multisig/PDA, or keep with policy.3) Execute changes: spl-token authorize ... for mint/freeze; ensure payer funds.4) Document and disclose: addresses, txids, rationale, timelines.5) Monitor: set alerts on authority changes and large mints/burns.## Templates / Playbooks- Risk disclosure snippet: "Mint authority held by 2/3 multisig for planned emissions; no freeze authority; policy: max 2% monthly with 24h notice."- Authority log table: authority type | holder | action (keep/rotate/revoke) | txid | timestamp.## Common Failure Modes + Debugging- Forgetting to update metadata after rotation; refresh explorers.- Leaving freeze authority active unintentionally -> blocked transfers.- Multisig missing signer availability -> stuck rotation.- PDA authority without signer seeds path -> cannot mint; store seeds + bump.## Quality Bar / Validation- Final authority state matches stated policy; txids recorded.- Disclosure published; holders can verify on-chain.- Alerts in place for authority or supply changes.## Output FormatProvide authority audit summary, actions taken/needed, txids, and disclosure text.## Examples- Simple: Fixed-supply meme token -> revoke mint/freeze; publish txids.- Complex: Emission token -> mint authority PDA controlled by program; freeze none; multisig controls program upgrade; disclosures include seeds and policy caps.---> Converted and distributed by [TomeVault](https://tomevault.io/claim/sanctifiedops) — claim your Tome and manage your conversions.

Frequently asked questions

Token Authority And Risk