token-scam-analysis SKILL.md skillA
token-scam-analysis from bankrbot/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add bankrbot/skills/token-scam-analysis@git:20260419.9d455cePins git:20260419.9d455ce in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- bankrbot/skills
- Path
bankr-token-scam-analysis/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260419.9d455ce, committed Apr 19, 2026
- First version recorded
- Apr 19, 2026
- Size
- 23,068 bytes
- Repository stars
- 1,209
- License
- none declared
Deep on-chain scam / rug / soft-rug analysis for EVM tokens (especially Clanker, Doppler, Bankr-style single-admin ERC-20s). Use when the user asks to "analyze this token for scam", "is this a rug", "should I trust this migration", "do a deep dive on holders and deployer", or provides one or more token addresses and wants a risk verdict backed by on-chain facts. Especially useful for migration narratives where a team claims they are "redeploying to fix tokenomics".
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Token Scam Analysis Skill You are performing a forensic on-chain analysis to determine whether a token (or set of tokens) is a scam, rug-pull, or soft-rug. The output is a written report saved to the user's file storage plus a verdict in chat. ## When to use this skill - User gives one or more token contract addresses and asks for a risk assessment. - User mentions a "migration" / "redeploy" / "new contract" narrative. - User names a Twitter/X handle of the project and wants to cross-reference claims vs on-chain reality. - Comparing old vs new contracts from the same team. ## Core principle Narrative is noise. On-chain state is signal. Every claim the team makes should be checked against what the contract and the deployer's wallet actually did. If the two conflict, the chain wins. **BUT: on-chain cleanliness ≠ not a scam.** A team can deploy a perfectly clean LayerZero OFT or ERC-20, hand it to a multisig, and still run a textbook insider pump-and-dump via CEX coordination and concentrated supply. You MUST always run the off-chain intel pass (Step Final-1) before issuing a verdict, or you will under-call real manipulation cases. --- …
Read the whole file at its exact version.
How to install
mdr add bankrbot/skills/token-scam-analysis@sha256:91ec6366decd7b5bThe line at the top of this page pins the label git:20260419.9d455ce, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_44pgqohdbmzjasuj)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, all committed on Apr 19, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260419.9d455ce latest | 2026-04-19 | 9d455ce | 23,068 B | A | view · diff |
| git:20260419.92e8cc6 | 2026-04-19 | 92e8cc6 | 21,515 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (23068 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
bankrbot/skills · 1,209 stars · license none declared · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_44pgqohdbmzjasuj GET https://markdownregistry.com/api/v1/resolve?ref=bankrbot/skills/token-scam-analysis GET https://markdownregistry.com/api/v1/blob/91ec6366decd7b5b0cd6b56ea98021c3d7152203e4fe93adb47ba09b843be475
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.