Meme Coin Scanner

Scan meme coins for scam signals, rug-pull risk, and on-chain audit flags. Use when evaluating tokens, auditing contracts, checking liquidity lock status.

Security Scan

The skill is internally consistent with its stated purpose (scanning meme coins) — it runs local scripts that query public on‑chain APIs and writes logs — but part of a file was truncated in the provided bundle so a full review would raise confidence.

Purpose & Capability

Name/description match the included scripts: the shell+Python scripts query token/DEX APIs, present risk heuristics, and print external checker links. No unrelated cloud credentials or unrelated binaries are requested.

Instruction Scope

SKILL.md instructs running local scripts (meme.sh, script.sh). Those scripts perform network GETs to public APIs (e.g., DexScreener), print assessments, and provide checklists. They also create a local data directory (~/.meme-scanner or XDG path) and write logs/history — expected for a CLI scanner but worth noting for privacy.

Install Mechanism

No install spec; this is instruction+bundled scripts only. Nothing is downloaded or executed from remote URLs during install.

Credentials

The skill declares no required env vars or credentials. Scripts optionally respect MEME_COIN_SCANNER_DIR/XDG_DATA_HOME to change data path and the tips mention API keys as optional. No unexplained secret access is present.

Persistence & Privilege

always:false and no modifications to system-wide or other skills' configs. The script persists logs and data in a per-user data directory (normal but persistent on the machine).

Assessment

This skill appears to do what it claims: run local scripts that call public token/DEX APIs and produce heuristic risk output. Before installing, consider: (1) The scripts will create and write logs under your home directory (~/.meme-scanner or an XDG path) that may contain token addresses or query history — review those files if you care about privacy. (2) The code makes outbound requests to public services (DexScreener etc.); those services will see your queried token addresses. (3) No secrets are required, but the tips mention optional API keys — only set keys if you trust the skill and the upstream services. (4) One of the provided files (scripts/meme.sh) was partially truncated in the supplied bundle; to raise confidence, review the full file to ensure there are no hidden network calls or unexpected behavior in the missing portion. If you want extra safety, run the scripts in a restricted/sandboxed environment or inspect the full source locally before use.

Detect scams and find gems in the meme coin market.

Commands

bash scripts/meme.sh scan <token_address> [chain]   # Deep scan a token
bash scripts/meme.sh new [chain]                     # New token listings
bash scripts/meme.sh trending                        # Trending meme coins
bash scripts/meme.sh checklist                       # Safety checklist

Risk Indicators

• 🔴 Honeypot: Can't sell after buying
• 🔴 Rug Pull: Dev can drain liquidity
• 🟡 High Tax: >10% buy/sell tax
• 🟡 Concentrated: Top holder >20% supply
• 🟢 Locked LP: Liquidity locked >6 months
• 🟢 Renounced: Ownership given up

Safety First

1. Never invest more than you can afford to lose
2. Always check contract before buying
3. Start with tiny amounts to test selling
4. Verify on multiple scanners (TokenSniffer, GoPlus)

---

💬 Feedback & Feature Requests: https://bytesagain.com/feedback Powered by BytesAgain | bytesagain.com

Requirements

• bash 4+
• python3 (standard library only)