What are 'weird' token patterns?

These are non-standard behaviors in ERC20/ERC721 tokens, such as not returning a boolean on transfer or charging fees on every move, which can break protocol logic and lead to fund loss.

Does this skill require Slither to be installed?

While the skill can perform logic-based analysis without it, having Slither installed allows it to run automated ERC conformity checks and generate detailed contract summaries.

How does it help with protocol integration safety?

It checks if your protocol uses defensive patterns like SafeERC20 wrappers, handles zero-value transfers correctly, and accounts for potential balance mismatches.

Can it analyze already deployed contracts?

Yes, if you provide a contract address, the skill can perform on-chain analysis to check for supply distribution, scarcity, and configuration settings.

Is it useful for NFT developers?

Absolutely. It includes specific assessment categories for ERC721 conformity, covering safeTransferFrom patterns, metadata immutability, and approval clearing.

Token Integration Analyzer

Name: Token Integration Analyzer
Author: trailofbits

bytrailofbits

•

2,992

•

Security & Testing

Analyzes smart contract token implementations and integrations to identify security vulnerabilities and non-standard ERC20/ERC721 behaviors.

The Token Integration Analyzer is a comprehensive security tool designed for smart contract developers and auditors using the Trail of Bits' industry-standard checklists. It systematically evaluates both token implementations and how protocols interact with external tokens, identifying over 20 'weird' token patterns—such as missing return values, fee-on-transfer issues, and reentrancy hooks—that often lead to critical financial exploits. By combining static analysis via Slither with on-chain data queries for scarcity and distribution, this skill provides prioritized recommendations and actionable risk assessments to ensure robust DeFi protocol security.

Key Features

01Automated ERC20 and ERC721 conformity checking integrated with Slither

022,992 GitHub stars

03Security evaluation of owner privileges, upgradeability, and minting capabilities

04Context-aware reporting for both token creators and protocol integrators

05Detection of 24+ 'weird' token patterns including fee-on-transfer and rebasing risks

06On-chain analysis for token scarcity, distribution, and holder concentration

Use Cases

01Verifying a new custom token implementation's compliance with ERC20/ERC721 standards

02Identifying centralization risks and 'god mode' privileges in deployed smart contracts

03Auditing a DeFi protocol's interaction with external tokens like USDT, USDC, or rebasing assets

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add trailofbits/skills token-integration-analyzer

For use in Claude.ai and ChatGPT

Download Skill