token-integration-analyzer
Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implementations for ERC20/ERC721 conformity, checks for 20+ weird token patterns, assesses contract composition and owner privileges, performs on-chain scarcity analysis, and evaluates how protocols handle non-standard tokens. Context-aware for both token implementations and token integrations.
npx skills add trailofbits/skills --skill token-integration-analyzer --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Token Integration Analyzer ## Purpose Systematically analyzes the codebase for token-related security concerns using Trail of Bits' token integration checklist: 1. **Token Implementations**: Analyze if your token follows ERC20/ERC721 standards or has non-standard behavior 2. **Token Integrations**: Analyze how your protocol handles arbitrary tokens, including weird/non-standard tokens 3. **On-chain Analysis**: Query deployed contracts for scarcity, distribution, and configuration 4. **Security Assessment**: Identify risks from 20+ known weird token patterns **Framework**: Building Secure Contracts - Token Integration Checklist + Weird ERC20 Database --- ## How This Works ### Phase 1: Context Discovery Determines analysis context: - **Token implementation**: Are you building a token contract? - **Token integration**: Does your protocol interact with external tokens? - **Platform**: Ethereum, other EVM chains, or different platform? - **Token types**: ERC20, ERC721, or both? ### Phase 2: Slither Analysis (if Solidity) For Solidity projects, I'll help run: - `slither-check-erc` - ERC conformity checks - `slither --print human-summary` - Complexity and upgrade analysis - `slither --p
- Purpose
- How This Works
- Phase 1: Context Discovery
- Phase 2: Slither Analysis (if Solidity)
- Phase 3: Code Analysis
- Phase 4: On-chain Analysis (if deployed)
- Phase 5: Risk Assessment
- Assessment Categories
- Quick Reference:
- Example Output
- Rationalizations (Do Not Skip)
- Deliverables
- Ready to Begin
What does the token-integration-analyzer skill do?
Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implementations for ERC20/ERC721 conformity, checks for 20+ weird token patterns, assesses contract composition and owner privileges, performs on-chain scarcity analysis, and evaluates how protocols handle non-standard tokens. Context-aware for both token implementations and token integrations.
How do I install it?
Run `npx skills add trailofbits/skills --skill token-integration-analyzer --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From trailofbits/skills, a repository with 6,426 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.