CodexPluginStats
← Plugin catalog
Developer Tools

TokenOS Contract Audit

TokenOS v1.0.3

Scan Solidity & Anchor code

Create a free account to save this plugin.

From the developer

Declared capabilities

  • Heuristic security scan for Solidity
  • Heuristic security scan for Solana Anchor / Rust
  • Findings with severity, lines and fixes

Cost & access

This plugin does not sell products or process payments. The scan is read-only and the pasted code is not stored.

Declared limitations

  • Unsupported language — Tool reports unsupported language; the assistant answers generally without a scan grade.
  • Empty input — The assistant asks the user to paste the source instead of calling the tool with nothing.
  • Guarantee request — No certification; results are presented as heuristics and findings to verify.

Onboarding example

Audit this Solidity contract for vulnerabilities — I'll paste the source
Sources & dates

Developer declarations; not independently tested. Listing last checked Nov 14, 2026. Package observed Nov 14, 2026.

View package source →

Description

From the marketplace listing

Heuristic security scan of Solidity and Solana (Anchor / native Rust) contracts: reentrancy patterns, missing access control, tx.origin, delegatecall, weak randomness, unchecked calls, missing signer / owner / PDA bump checks, unchecked arithmetic and more — each with line numbers, severity and a fix, plus an overall letter grade. Read-only: the code you paste is analysed in memory and never stored. Tools: • quick_audit — Static heuristic scan of a Solidity or Solana (Anchor / Rust) contract: findings with severity, line numbers and fixes, plus a letter grade. Targets questions like: “audit my solidity contract”; “smart contract security checker”; “is this contract safe”; “solidity vulnerability scanner”; “anchor program audit”; “reentrancy check”. Documentation: https://tokenos.ai/mcp/contract-audit Outputs are informational — on-chain reads, deterministic calculators and heuristic scans — not financial, legal or security advice. TokenOS is non-custodial and never holds keys or funds; anything you launch, deploy or sign happens from your own wallet.

Language: English · Automatically detected from descriptions.

ChatGPT marketplace listing ↗Website ↗Privacy policy ↗Terms ↗Support ↗

Matches for “fix rust code”

Exact text from the indicated source. A mention alone does not establish support for your task.

Publisher full description

Heuristic security scan of Solidity and Solana (Anchor / native Rust) contracts: reentrancy patterns, missing access control, tx.origin, delegatecall, weak randomness, unchecked calls, missing signer / owner / PDA bump checks, unchecked arithmetic and more — each with line numbers, severity and a fix, plus an overall letter grade. Read-only: the code you paste is analysed in memory and never stored. Tools: • quick_audit — Static heuristic scan of a Solidity or Solana (Anchor / Rust) contract: findings with severity, line numbers and fixes, plus a letter grade. Targets questions like: “audit my solidity contract”; “smart contract security checker”; “is this contract safe”; “solidity vulnerability scanner”; “anchor program audit”; “reentrancy check”. Documentation: https://tokenos.ai/mcp/contract-audit Outputs are informational — on-chain reads, deterministic calculators and heuristic scans — not financial, legal or security advice. TokenOS is non-custodial and never holds keys or funds; anything you launch, deploy or sign happens from your own wallet.

Publisher capabilities · listing

Heuristic security scan for Solidity Heuristic security scan for Solana Anchor / Rust Findings with severity, lines and fixes Letter grade per contract

Publisher subtitle

Scan Solidity & Anchor code

Publisher description

Paste a Solidity or Anchor contract and get an instant security scan — reentrancy, access control, signer checks, unchecked math — with line numbers, severity and a fix for each finding.

What changed

Keywords

Files & skills

File archives

Plugin package6 files · 234 KBBrowse files →

Release notes

1.0.3: TokenOS-branded display name; widgets now implement the MCP Apps standard (_meta.ui.resourceUri + ui/* bridge) alongside the openai/* aliases; listing update — revised descriptions and capabilities, runnable inline review test cases, demo recording URL. quick_audit is the only tool (deep_audit removed, no commerce). Scanner now catches block.timestamp / block.number randomness inside hashes or modulo and any public setter that changes state without checking the caller; single-line pastes no longer show L1 on every finding. Review test cases carry the exact line numbers the scanner reports. Tools: quick_audit.

Declared in the saved package. Remote tools may change independently.

Package details

Publisher declarations from the archived package. These are separate from our research and the live service's terms.

Package author
TokenOS
Keywords
See keywords
Commerce declaration
Does not support commerceThis does not establish whether access is free or paid.
Review scenarios
5 positive · 3 negativeScenario counts, not test results.

Declared capabilities

  • Heuristic security scan for Solidity
  • Heuristic security scan for Solana Anchor / Rust
  • Findings with severity, lines and fixes
  • Letter grade per contract

Package observed Nov 14, 2026.

plugin.json
Technical details
First seen
Oct 6, 2026 · 00:00 UTC
Last seen
Nov 14, 2026 · 18:00 UTC
Collection status
Collected

plugin_asdk_app_6ac05dd7a5d88191a8ffe686556b9a3b

Download plugin data (JSON)

Plugin details: freshly prepared. Prepared . Refreshed when plugin data changes or after 6 hours. Your account and Follow status are live.