Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Clawpump/agents-skills --skill rug-checkgit clone --depth 1 https://github.com/Clawpump/agents-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/clawpump/agents-skills/rug-check)<a href="https://agentmods.dev/skills/clawpump/agents-skills/rug-check"><img src="https://agentmods.dev/badge/skills/clawpump/agents-skills/rug-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/clawpump/agents-skills/rug-check"><img src="https://agentmods.dev/badge/skills/clawpump/agents-skills/rug-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.01228 |
| Opus 5 | $0.00020 | $0.00614 |
| Sonnet 5 | $0.00008 | $0.00246 |
| Haiku 4.5 | $0.00004 | $0.00123 |
Grade A, and why
rug-check scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
commands: [curl, python3] How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
rug-check — Solana Token Safety
Read-only safety diligence for any Solana token mint. Never signs anything.
It pairs with the ClawPump MCP trade/launch tools (swap_execute,
launch_token_gasless, …) as the pre-flight that decides whether a token is
safe to touch.
Two independent sources, cross-checked:
- On-chain (authoritative): Solana JSON-RPC for mint/freeze authority and real top-holder concentration — facts, not opinions.
- RugCheck (heuristic): a community risk score + flagged risks.
Helper: scripts/rugcheck.py. Endpoint reference: references/api-endpoints.md.
When to Use
- Before any
swap_executeinto an unfamiliar token. - A user pastes a mint and asks "is this safe / is it a rug / can I ape this?"
- Before launching or buying alongside an existing token.
- Vetting a token a tracked wallet/whale just bought.
Quick Check (do this first)
python3 ~/.hermes/skills/crypto/rug-check/scripts/rugcheck.py check <MINT>
This prints a consolidated verdict: authority status, top-10 concentration,
RugCheck score, and a CLEAN / CAUTION / RUGGABLE line with the reasons.
Key Concepts
- Mint authority — if NOT revoked (non-null), the team can mint unlimited new supply and dilute you. Revoked (null) is the safe state.
- Freeze authority — if NOT revoked, the team can freeze your tokens so you can't sell. Revoked (null) is safe.
- LP locked vs burned — liquidity that's burned/locked can't be pulled (the classic "rug"). Unlocked LP is a red flag.
- Top-holder concentration — a few wallets holding most of the supply can dump on everyone. >30% top-10 is elevated, >60% is dangerous. (Some large holders are locked LP / CEX / vesting — verify owners before concluding.)
- RugCheck score — heuristic, not a guarantee. Use it as a signal, not a verdict.
Individual Commands
# RPC authority cross-check (mint can't be inflated / frozen?)
python3 scripts/rugcheck.py authority <MINT>
# Holder concentration from on-chain largest accounts
python3 scripts/rugcheck.py holders <MINT> --top 10
# RugCheck quick summary (+ risk flags) / full report
python3 scripts/rugcheck.py summary <MINT>
python3 scripts/rugcheck.py report <MINT>
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 118 lines · 40 tokens per session scan A 065fd8c1b751
rug-check is a skill published in the GitHub repository Clawpump/agents-skills (2 stars, last pushed 2mo ago), licensed MIT. It adds 40 tokens to every session and 1,228 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
ct-alpha
Crypto Twitter intelligence and alpha research. Search X/Twitter for real-time crypto narratives, trending tokens, yield strategies, smart money signals, and protocol research. Features TweetRank (PageRank-inspired credibility scoring), multi-signal token detection, coordinated raid detection, and dynamic tool…
integrating-jupiter
Comprehensive guidance for integrating Jupiter APIs (Swap, Lend, Perps, Trigger, Recurring, Tokens, Price, Portfolio, Prediction Markets, Send, Studio, Lock, Routing). Use for endpoint selection, integration flows, error handling, and production hardening.
pnp-markets-solana
Create, trade, and settle permissionless prediction markets on Solana. Use when building prediction market infrastructure, creating social media markets (Twitter/YouTube/DeFiLlama), setting up custom oracle resolution, P2P betting, or autonomous agent-driven forecasting. Supports V2 AMM, P2P (V3), and custom oracle…
solana-defi
Solana DeFi skill — swap tokens via Jupiter, get prices, stake SOL, query balances, transfer SPL tokens, browse NFTs via Metaplex DAS, resolve .sol domains, and monitor network health.
alchemy-agentic-gateway
Use when accessing Alchemy APIs for RPC calls, token balances, NFT metadata, asset transfers, transaction simulation, or Alchemy-specific features. Also use when the user mentions "SIWE", "SIWS", "x402", "MPP", "mppx", or "agentic gateway" — this skill covers wallet-based auth flows for Alchemy's x402 and MPP…
wealthville
Score Solana and EVM liquidity pools before providing liquidity. Returns a 0-100 pool score, an ENTER/HOLD/EXIT/REDUCE/AVOID verdict with calibrated confidence, and a public miss-inclusive track record. Use when a user asks whether a pool is worth LPing into, which pools currently look best, or how the scores have…