Overview
token-integration-analyzer is an open-source integrations skill for Claude Code and compatible agents, published by trailofbits. Its author describes it as: “Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implementations for ERC20/ERC721 conformity, checks for 20+ weird token patterns, assesses contract com…”. The project has 6.6k stars on GitHub and is available under the CC-BY-SA-4.0 license. Add it to your setup with `/plugin marketplace add trailofbits/skills`.
What token-integration-analyzer does
Systematically analyzes the codebase for token-related security concerns using Trail of Bits' token integration checklist:
What’s inside
The SKILL.md for token-integration-analyzer is organised into these sections:
- Purpose
- How This Works
- Phase 1: Context Discovery
- Phase 2: Slither Analysis (if Solidity)
- Phase 3: Code Analysis
- Phase 4: On-chain Analysis (if deployed)
- Phase 5: Risk Assessment
- Assessment Categories
- Quick Reference:
- Example Output
- Rationalizations (Do Not Skip)
- Deliverables
Installation
Add token-integration-analyzer to your agent with:
/plugin marketplace add trailofbits/skillsReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- Claude Code — ships a claude code plugin marketplace
License
token-integration-analyzer is published under the CC-BY-SA-4.0 license.
Strengths
- Clear CC-BY-SA-4.0 license — safe to read and adapt within its terms
- Ships in trailofbits/skills, an established project with 6,646 GitHub stars
- Works with Claude Code
- Actively maintained — repository updated in the last 90 days
Author
Topics
Alternatives to token-integration-analyzer
Similar skills from other repositories:
Frequently asked questions
- What does token-integration-analyzer do?
- Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implementations for ERC20/ERC721 conformity, checks for 20+ weird token patterns, assesses contract composition and owner privileges, performs on-chain scarcity analysis, and evaluates how protocols handle non-standard tokens. Context-aware for both token implementations and token integrations.
- How do I install token-integration-analyzer?
- Run /plugin marketplace add trailofbits/skills in your agent, then reload your skills. Review the source at https://github.com/trailofbits/skills before installing.
- Is token-integration-analyzer free to use?
- Yes. token-integration-analyzer is free and open source under the CC-BY-SA-4.0 license, so you can read, run, and adapt it within that license's terms.
- Which agents does token-integration-analyzer work with?
- token-integration-analyzer lists Claude Code — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does token-integration-analyzer come from?
- token-integration-analyzer ships inside trailofbits/skills, a repository that contains 41 catalogued skills in total. The repository's 6,646 GitHub stars apply to that whole collection, not to this skill on its own.
