quillshield
Smart contract security audit skill for the BD pipeline. Analyzes Solana token contracts for red flags: honeypots, rug pull patterns, authority risks, liquidity locks, and holder concentration. Produces a safety score (0-100) to inform listing decisions.
Source facts
- Repository
- buzzbysolcex/buzz-bd-agent
- Last source activity
- May 18, 2026 at 02:11
- Detected SKILL.md language
- English
- Stars
- 5
- Forks
- 2
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Showing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- quillshield
- description
- Smart contract security audit skill for the BD pipeline. Analyzes Solana token contracts for red flags: honeypots, rug pull patterns, authority risks, liquidity locks, and holder concentration. Produces a safety score (0-100) to inform listing decisions.
- metadata
- {"openclaw":{"emoji":"🛡️","requires":{}}}
# QuillShield — Smart Contract Safety Scoring
Analyze Solana token contracts for security risks before recommending them for listing on SolCex Exchange. Produce a safety score from 0-100.
## Safety Score Framework
### Score Ranges
- **80-100**: Safe — low risk, recommend for listing review
- **60-79**: Caution — some risks, needs manual review
- **40-59**: Warning — significant risks, not recommended
- **0-39**: Danger — high risk, reject immediately
### Scoring Criteria (100 points total)
#### 1. Authority Analysis (25 points)
- Mint authority revoked? (+10 if yes, -10 if no)
- Freeze authority revoked? (+10 if yes, -10 if no)
- Update authority status (+5 if revoked/multisig)
#### 2. Liquidity Analysis (25 points)
- Liquidity pool size vs market cap ratio (+10 if >10%)
- Liquidity locked? (+10 if locked >6 months)
- LP token burn status (+5 if burned)
#### 3. Holder Distribution (25 points)
- Top 10 holders concentration (+10 if <30%)
- Creator wallet holdings (+10 if <5%)
- Whale wallet analysis (+5 if no single wallet >10%)
#### 4. Contract Patterns (25 points)
- Trading enabled both ways (buy AND sell)? (+10)
- No excessive tax/fee (>5%)? (+5)
- Contract verified/open source? (+5)
- No suspicious transfer restrictions? (+5)
## Data Sources
Use these APIs to gather contract data:
### DexScreener API
```
GET https://api.dexscreener.com/latest/dex/tokens/{contractAddress}
```
Returns: price, market cap, volume, liquidity, pair info
### Helius API (Solana-specific)
```
POST https://api.helius.xyz/v0/token-metadata?api-key={HELIUS_API_KEY}
Body: { "mintAccounts": ["{contractAddress}"] }
```
Returns: token metadata, authority info, supply data
### Solana FM
```
GET https://api.solana.fm/v0/tokens/{contractAddress}/holders
```
Returns: holder distribution
## Audit Workflow
1. **Input**: Contract address (CA) from prospect pipeline
2. **Fetch**: Pull data from DexScreener + Helius + Solana FM
3. **Analyze**: Score against all 4 criteria categories
4. **Output**: Safety score + risk summary + recommendation
## Output Format
```
🛡️ QuillShield Audit Report
Token: {name} ({symbol})
Contract: {address}
Safety Score: {score}/100 [{SAFE|CAUTION|WARNING|DANGER}]
Authority: {score}/25 — {summary}
Liquidity: {score}/25 — {summary}
Distribution: {score}/25 — {summary}
Contract: {score}/25 — {summary}
Recommendation: {APPROVE for review | MANUAL REVIEW needed | REJECT}
Risk Flags: {list of specific risks found}
```
## Integration with BD Pipeline
- Run QuillShield on every prospect that scores 70+ in the BD pipeline
- Add safety score to prospect metadata before outreach
- Reject prospects with safety score below 40
- Flag prospects with safety score 40-59 for manual review
- Include safety score in listing proposal to SolCex team
View on GitHub