| name | auditing-wallet-security |
| description | Audit wallet security by analyzing token approvals, permissions, and transaction patterns.
Use when checking wallet security, reviewing approvals, or assessing risk exposure.
Trigger with phrases like "audit wallet", "check approvals", "security scan", or "revoke tokens".
|
| allowed-tools | Read, Write, Edit, Grep, Glob, Bash(crypto:wallet-*) |
| version | 1.17.0 |
| author | Jeremy Longshore <jeremy@intentsolutions.io> |
| license | MIT |
| tags | ["crypto","security","audit"] |
| compatibility | Designed for Claude Code |
Wallet Security Auditor
Overview
Security analysis tool for cryptocurrency wallets. Scans ERC20 token approvals, analyzes transaction patterns, calculates security risk scores, and provides actionable recommendations to improve wallet security.
Important: This is a read-only analysis tool. It does NOT execute transactions, manage private keys, or perform revocations.
Prerequisites
Before using this skill, ensure you have:
- Python 3.8+ with
requests library installed
- Optional:
ETHERSCAN_API_KEY environment variable for higher rate limits
- Network access to blockchain RPC endpoints (public RPCs included)
- Target wallet address (hex format, 0x...)
Instructions
1. List Token Approvals
Scan wallet for all active ERC20 token approvals:
cd ${CLAUDE_SKILL_DIR}/scripts
python wallet_auditor.py approvals <address> --chain <chain>
Options:
--chain: ethereum, bsc, polygon, arbitrum, optimism, base (default: ethereum)--unlimited: Show only unlimited approvals--verbose: Detailed output
2. Full Security Scan
Comprehensive security analysis including approvals, transaction history, and patterns:
python wallet_auditor.py scan <address> --verbose
Analyzes:
4. Active token approvals (unlimited, risky)
5. Transaction history patterns
6. Contract interactions (verified vs unverified)
7. Suspicious activity detection
3. Calculate Security Score
Get weighted security risk score (0-100, higher = safer):
python wallet_auditor.py score <address>
python wallet_auditor.py score <address> --json # JSON output
Score components:
8. Approvals (40%): Unlimited, risky, stale approvals
9. Interactions (30%): Contract verification, flagged addresses
10. Patterns (20%): Transaction frequency, diversity
11. Age (10%): Wallet maturity
Risk levels:
12. 90-100: SAFE
13. 70-89: LOW
14. 50-69: MEDIUM
15. 30-49: HIGH
16. 0-29: CRITICAL
4. Analyze Transaction History
Review recent contract interactions and patterns:
python wallet_auditor.py history <address> --days 30
Detects:
17. Rapid approval patterns
18. Interaction bursts (many contracts in short time)
19. High failure rates
20. Dust attacks
