Token Scan

Use {skillDir}/scripts/token_scan.py to inspect one token contract with the CertiK token scan API.

Use this skill when the user wants a token risk review for a specific chain and contract address.

When to use this skill

• - Analyze token contract security risk
• Review high-risk findings and alert severity
• Interpret buy or sell tax fields
• Check holder concentration and LP lock status

Supported chains

INLINECODE1, eth, solana, arbitrum, base, polygon, avax, tron, ton, plasma, INLINECODE11

If the user provides a chain outside this list, do not call the API. Tell the user the chain is not supported yet and list the supported chains.

Workflow

1. 1. Confirm the chain is supported.
2. Validate the address format when the chain format is obvious from the input.
3. Prefer the bundled Python script for execution.
4. If Python is unavailable, use the documented curl fallback.
5. If the result is still running, report that the scan is in progress instead of pretending the scan is complete.
6. Return the result in this order:

1. 7. Only include raw fields when the user explicitly asks for audit-level detail.

Execution

Important: --chain only supports bsc|eth|solana|arbitrum|base|polygon|avax|tron|ton|plasma|sui.
If the user provides a chain outside this list, do not call the API. Reply that the chain is not supported yet and include the supported chain list so the user can switch.

Prefer Python first:

CODEBLOCK0

If Python is unavailable, use curl:

CODEBLOCK1

Output requirements

1. 1. Risk overview must include score, alert_count, and the highest alert level.
2. Alert list must be sorted by Critical -> Major -> Medium -> Minor and show up to 8 items.
3. If alert_count > 8, explicitly say: Total N alerts, showing the top 8 highest-priority items.
4. Clarify that values like skyknight_score.details.buy_tax and skyknight_score.details.sell_tax are deduction factors, not the real tax percentage.
5. Prefer the real buy or sell tax value from security_summary.*.extended_data.* when it exists.

Public API

• - Endpoint: INLINECODE24
• Query parameters:

Example:

CODEBLOCK2

Supported chain formats:

• - arbitrum: EVM hex 0x... with 42 chars
• INLINECODE29: EVM hex 0x... with 42 chars
• INLINECODE31: EVM hex 0x... with 42 chars
• INLINECODE33: EVM hex 0x... with 42 chars
• INLINECODE35: EVM hex 0x... with 42 chars
• INLINECODE37: EVM hex 0x... with 42 chars
• INLINECODE39: EVM hex 0x... with 42 chars
• INLINECODE41: Base58 public key
• INLINECODE42: Hex 0x... with module path
• INLINECODE44: EQ or UQ prefix, 46-48 chars
• INLINECODE47: Base58check, starts with T, 34 chars

Result notes

• - If message is in progress, the scan has not finished.
• If message is success, the scan is complete and can be summarized.
• If message is error, return the upstream error information.
• INLINECODE55 and skyknight_score.details.sell_tax are deduction factors, not literal tax percentages.
• Prefer actual tax values from: