| name | quillshield |
| description | Smart contract security audit skill for the BD pipeline. Analyzes Solana token contracts for red flags: honeypots, rug pull patterns, authority risks, liquidity locks, and holder concentration. Produces a safety score (0-100) to inform listing decisions. |
| metadata | {"openclaw":{"emoji":"🛡️","requires":{}}} |
QuillShield — Smart Contract Safety Scoring
Analyze Solana token contracts for security risks before recommending them for listing on SolCex Exchange. Produce a safety score from 0-100.
Safety Score Framework
Score Ranges
- 80-100: Safe — low risk, recommend for listing review
- 60-79: Caution — some risks, needs manual review
- 40-59: Warning — significant risks, not recommended
- 0-39: Danger — high risk, reject immediately
Scoring Criteria (100 points total)
1. Authority Analysis (25 points)
- Mint authority revoked? (+10 if yes, -10 if no)
- Freeze authority revoked? (+10 if yes, -10 if no)
- Update authority status (+5 if revoked/multisig)
2. Liquidity Analysis (25 points)
- Liquidity pool size vs market cap ratio (+10 if >10%)
- Liquidity locked? (+10 if locked >6 months)
- LP token burn status (+5 if burned)
3. Holder Distribution (25 points)
- Top 10 holders concentration (+10 if <30%)
- Creator wallet holdings (+10 if <5%)
- Whale wallet analysis (+5 if no single wallet >10%)
4. Contract Patterns (25 points)
- Trading enabled both ways (buy AND sell)? (+10)
- No excessive tax/fee (>5%)? (+5)
- Contract verified/open source? (+5)
- No suspicious transfer restrictions? (+5)
Data Sources
Use these APIs to gather contract data:
DexScreener API
GET https://api.dexscreener.com/latest/dex/tokens/{contractAddress}
Returns: price, market cap, volume, liquidity, pair info
Helius API (Solana-specific)
POST https://api.helius.xyz/v0/token-metadata?api-key={HELIUS_API_KEY}
Body: { "mintAccounts": ["{contractAddress}"] }
Returns: token metadata, authority info, supply data
Solana FM
GET https://api.solana.fm/v0/tokens/{contractAddress}/holders
Returns: holder distribution
Audit Workflow
- Input: Contract address (CA) from prospect pipeline
- Fetch: Pull data from DexScreener + Helius + Solana FM
- Analyze: Score against all 4 criteria categories
- Output: Safety score + risk summary + recommendation
Output Format
🛡️ QuillShield Audit Report
Token: {name} ({symbol})
Contract: {address}
Safety Score: {score}/100 [{SAFE|CAUTION|WARNING|DANGER}]
Authority: {score}/25 — {summary}
Liquidity: {score}/25 — {summary}
Distribution: {score}/25 — {summary}
Contract: {score}/25 — {summary}
Recommendation: {APPROVE for review | MANUAL REVIEW needed | REJECT}
Risk Flags: {list of specific risks found}
Integration with BD Pipeline
- Run QuillShield on every prospect that scores 70+ in the BD pipeline
- Add safety score to prospect metadata before outreach
- Reject prospects with safety score below 40
- Flag prospects with safety score 40-59 for manual review
- Include safety score in listing proposal to SolCex team
