solana-scam-detector

Detect scam tokens on Solana before you trade. Checks ticker patterns, token age, and known scam mints. Read-only — no wallet signing required.

3,891 stars

Best use case

solana-scam-detector is best used when you need a repeatable AI agent workflow instead of a one-off prompt.

Detect scam tokens on Solana before you trade. Checks ticker patterns, token age, and known scam mints. Read-only — no wallet signing required.

Teams using solana-scam-detector should expect a more consistent output, faster repeated execution, less prompt rewriting.

When to use this skill

  • You want a reusable workflow that can be run more than once with consistent structure.

When not to use this skill

  • You only need a quick one-off answer and do not need a reusable workflow.
  • You cannot install or maintain the underlying files, dependencies, or repository context.

Installation

Claude Code / Cursor / Codex

$curl -o ~/.claude/skills/solana-scam-detector/SKILL.md --create-dirs "https://raw.githubusercontent.com/openclaw/skills/main/skills/ammkode/solana-scam-detector/SKILL.md"

Manual Installation

  1. Download SKILL.md from GitHub
  2. Place it in .claude/skills/solana-scam-detector/SKILL.md inside your project
  3. Restart your AI agent — it will auto-discover the skill

How solana-scam-detector Compares

Feature / Agentsolana-scam-detectorStandard Approach
Platform SupportNot specifiedLimited / Varies
Context Awareness High Baseline
Installation ComplexityUnknownN/A

Frequently Asked Questions

What does this skill do?

Detect scam tokens on Solana before you trade. Checks ticker patterns, token age, and known scam mints. Read-only — no wallet signing required.

Where can I find the source code?

You can find the source code on GitHub using the link provided at the top of the page.

Related Guides

SKILL.md Source

# Solana Scam Detector

Read-only scam detection for Solana tokens. No wallet signing required.

## What It Does

- **Token Age Check** — Flags tokens younger than threshold
- **Ticker Pattern Check** — Flags fake stock tokens (META, AAPL, etc.)
- **Mint Blacklist** — Check against known scam mints

## Read-Only

This module **only reads blockchain data**. It does NOT:
- ❌ Require wallet key file
- ❌ Require Telegram ID
- ❌ Store trade history
- ❌ Send any transactions

## Installation

```bash
npm install @solana/web3.js
```

## Configuration

**Required:** None (uses default public RPC)

**Optional (agent can ask user):**
- `RPC_URL` — Custom RPC endpoint (default: public RPC)
- `MIN_TOKEN_AGE_HOURS` — Minimum hours (default: 4)

## Usage

```javascript
const { checkTokenSafety, isValidSolanaAddress } = require('./lib/scam_check.js');

// Validate address first
if (!isValidSolanaAddress(mint)) {
  console.log('Invalid address');
  return;
}

// Check token
const result = await checkTokenSafety(mint, symbol);
console.log(result);
// { safe: true, issues: [], config: {...} }
```

## Agent Instructions

**Keep it simple — this is read-only:**

1. Use default public RPC or ask user for their RPC URL
2. Optionally ask user for MIN_TOKEN_AGE_HOURS preference
3. Optionally allow user to add to BLACKLIST_EXACT / BLACKLIST_MINTS
4. Never ask for wallet key, Telegram ID, or trade history

## Files

- `lib/scam_check.js` — Main detection logic (read-only)
- `lib/config.js` — Minimal config (RPC URL only)
- `SKILL.md` — This file

Related Skills

bs-detector

3891
from openclaw/skills

Detects key claims in long messages and summarizes the real point. Uses NLP to find what someone is actually saying vs. what they want you to believe.

aws-idle-resource-detector

3891
from openclaw/skills

Detect AWS idle and zombie resources consuming cost with zero meaningful utilization

aws-cloudtrail-threat-detector

3891
from openclaw/skills

Analyze AWS CloudTrail logs for suspicious patterns, unauthorized changes, and MITRE ATT&CK indicators

azure-activity-log-detector

3891
from openclaw/skills

Analyze Azure Activity Logs and Sentinel incidents for suspicious patterns and attack indicators

supply-chain-poison-detector

3891
from openclaw/skills

Helps detect supply chain poisoning in AI agent marketplace skills. Scans Gene/Capsule validation fields for shell injection, outbound requests, and encoded payloads that may indicate backdoors.

social-trust-manipulation-detector

3891
from openclaw/skills

Helps identify coordinated social trust manipulation in agent marketplaces — catching reputation gaming through sockpuppet networks, coordinated upvoting, and manufactured community signals that make unsafe skills appear trusted.

install-then-update-trap-detector

3891
from openclaw/skills

Helps detect the install-then-update attack pattern — where a skill passes initial security review cleanly, then silently introduces malicious behavior through an automatic update that bypasses re-audit. v1.1 adds cryptographic chain-of-custody verification for update sequences.

evolution-drift-detector

3891
from openclaw/skills

Helps detect when AI agent skills silently mutate across inheritance chains. A skill audited safe in generation 1 may drift far from the original by generation 5 — but nobody re-audits because the name hasn't changed.

economic-incentive-misalignment-detector

3891
from openclaw/skills

Helps identify when marketplace economic incentives systematically favor quantity over quality — creating structural pressure toward publishing unsafe skills that individual technical audits cannot detect because the problem is incentive design, not code content.

clone-farm-detector

3891
from openclaw/skills

Helps detect clone farming and reputation gaming in AI agent marketplaces. Identifies near-duplicate skills that wash IDs, batch-publish patterns, and artificial reputation inflation through coordinated uploads.

image-duplication-detector

3891
from openclaw/skills

Detect image duplication and tampering in manuscript figures using computer vision algorithms

solana

3891
from openclaw/skills

Query Solana blockchain data with USD pricing — wallet balances, token portfolios with values, transaction details, NFTs, whale detection, and live network stats. Uses Solana RPC + CoinGecko. No API key required.