Wallet Security Auditor

Overview

Security analysis tool for cryptocurrency wallets. Scans ERC20 token approvals, analyzes transaction patterns, calculates security risk scores, and provides actionable recommendations to improve wallet security.

Important: This is a read-only analysis tool. It does NOT execute transactions, manage private keys, or perform revocations.

Prerequisites

Before using this skill, ensure you have:

• Python 3.8+ with requests library installed
• Optional: ETHERSCANAPIKEY environment variable for higher rate limits
• Network access to blockchain RPC endpoints (public RPCs included)
• Target wallet address (hex format, 0x...)

Instructions

1. List Token Approvals

Scan wallet for all active ERC20 token approvals:

cd ${CLAUDE_SKILL_DIR}/scripts
python wallet_auditor.py approvals <address> --chain <chain>

Options:

1. --chain: ethereum, bsc, polygon, arbitrum, optimism, base (default: ethereum)
2. --unlimited: Show only unlimited approvals
3. --verbose: Detailed output

2. Full Security Scan

Comprehensive security analysis including approvals, transaction history, and patterns:

python wallet_auditor.py scan <address> --verbose

Analyzes:

1. Active token approvals (unlimited, risky)
2. Transaction history patterns
3. Contract interactions (verified vs unverified)
4. Suspicious activity detection

3. Calculate Security Score

Get weighted security risk score (0-100, higher = safer):

python wallet_auditor.py score <address>
python wallet_auditor.py score <address> --json  # JSON output

Score components:

1. Approvals (40%): Unlimited, risky, stale approvals
2. Interactions (30%): Contract verification, flagged addresses
3. Patterns (20%): Transaction frequency, diversity
4. Age (10%): Wallet maturity

Risk levels:

1. 90-100: SAFE
2. 70-89: LOW
3. 50-69: MEDIUM
4. 30-49: HIGH
5. 0-29: CRITICAL

4. Analyze Transaction History

Review recent contract interactions and patterns:

python wallet_auditor.py history <address> --days 30

Detects:

1. Rapid approval patterns
2. Interaction bursts (many contracts in short time)
3. High failure rates
4. Dust attacks

5. Generate Revoke List

Get prioritized list of approvals to revoke:

python wallet_auditor.py revoke-list <address>

Flags:

1. Unlimited approvals to unknown con