← Plugin catalog
TO
Developer ToolsTokenOS Contract Audit
TokenOS v1.0.3
Follow this plugin to keep it in your list and review observed changes. Free account · Up to 10 plugins · No card required.
What changed
Observed changes, with before-and-after evidence
Metadata · Oct 9, 2026 · 00:04 UTC · Compared with Oct 6, 2026 · 00:02 UTC
WHAT CHANGED · RULE-BASED ANALYSISPackage or technical metadata updated
Discoverability changed from “UNLISTED” to “LISTED”.
Observed in package metadata. These changes alone do not establish a new customer-facing feature.
Short excerpts from up to four changed fields. Open the full comparison for all changes.
Discoverability
BeforeOct 6, 2026 · 00:02 UTC
UNLISTED
AfterOct 9, 2026 · 00:04 UTC
LISTED
Share url
BeforeOct 6, 2026 · 00:02 UTC
Not present
AfterOct 9, 2026 · 00:04 UTC
https://chatgpt.com/plugins/plugin_asdk_app_6ac05dd7a5d88191a8ffe686556b9a3b?open_in_app
Publisher description
From the marketplace listing
Heuristic security scan of Solidity and Solana (Anchor / native Rust) contracts: reentrancy patterns, missing access control, tx.origin, delegatecall, weak randomness, unchecked calls, missing signer / owner / PDA bump checks, unchecked arithmetic and more — each with line numbers, severity and a fix, plus an overall letter grade. Read-only: the code you paste is analysed in memory and never stored.
Tools:
• quick_audit — Static heuristic scan of a Solidity or Solana (Anchor / Rust) contract: findings with severity, line numbers and fixes, plus a letter grade.
Targets questions like: “audit my solidity contract”; “smart contract security checker”; “is this contract safe”; “solidity vulnerability scanner”; “anchor program audit”; “reentrancy check”.
Documentation: https://tokenos.ai/mcp/contract-audit
Outputs are informational — on-chain reads, deterministic calculators and heuristic scans — not financial, legal or security advice. TokenOS is non-custodial and never holds keys or funds; anything you launch, deploy or sign happens from your own wallet.
Language: English · Automatically detected from descriptions.
Publisher keywords
Search terms declared by the publisher.
Matches for “pr”
Exact text from the indicated source. A mention alone does not establish support for your task.
Publisher keywords · listing
audit my solidity contract
smart contract security checker
is this contract safe
solidity vulnerability scanner
anchor program audit
reentrancy check
solana smart contract audit
smart contract audit tool
Publisher full description
Heuristic security scan of Solidity and Solana (Anchor / native Rust) contracts: reentrancy patterns, missing access control, tx.origin, delegatecall, weak randomness, unchecked calls, missing signer / owner / PDA bump checks, unchecked arithmetic and more — each with line numbers, severity and a fix, plus an overall letter grade. Read-only: the code you paste is analysed in memory and never stored.
Tools:
• quick_audit — Static heuristic scan of a Solidity or Solana (Anchor / Rust) contract: findings with severity, line numbers and fixes, plus a letter grade.
Targets questions like: “audit my solidity contract”; “smart contract security checker”; “is this contract safe”; “solidity vulnerability scanner”; “anchor program audit”; “reentrancy check”.
Documentation: https://tokenos.ai/mcp/contract-audit
Outputs are informational — on-chain reads, deterministic calculators and heuristic scans — not financial, legal or security advice. TokenOS is non-custodial and never holds keys or funds; anything you launch, deploy or sign happens from your own wallet.
Files & skills
Publisher release notes
1.0.3: TokenOS-branded display name; widgets now implement the MCP Apps standard (_meta.ui.resourceUri + ui/* bridge) alongside the openai/* aliases; listing update — revised descriptions and capabilities, runnable inline review test cases, demo recording URL. quick_audit is the only tool (deep_audit removed, no commerce). Scanner now catches block.timestamp / block.number randomness inside hashes or modulo and any public setter that changes state without checking the caller; single-line pastes no longer show L1 on every finding. Review test cases carry the exact line numbers the scanner reports. Tools: quick_audit.
Declared in the saved package. Remote tools may change independently.
Package details
Publisher declarations from the archived package. These are separate from our research and the live service's terms.
- Package author
- TokenOS
- Keywords
- See publisher keywords
- Commerce declaration
- Does not support commerceThis does not establish whether access is free or paid.
- Publisher review scenarios
- 5 positive · 3 negativeDeclared scenarios, not independently verified test results.
Declared capabilities
- Heuristic security scan for Solidity
- Heuristic security scan for Solana Anchor / Rust
- Findings with severity, lines and fixes
- Letter grade per contract
Package observed Oct 10, 2026.
Technical details
- First seen
- Oct 6, 2026 · 00:00 UTC
- Last seen
- Oct 10, 2026 · 18:00 UTC
- Collection status
- Collected
plugin_asdk_app_6ac05dd7a5d88191a8ffe686556b9a3b
Download plugin data (JSON)
Before you connect TokenOS Contract Audit
How do I connect it?
Open the publisher's marketplace listing to check current availability and follow its connection instructions. This directory does not install plugins. Check the requested access and any account requirements before connecting.
Check marketplace availability ↗
Does it require paid access?
We have not established the pricing or subscription requirements for this plugin. An absent price does not mean free access.
Compare researched pricing and access models →
How can I evaluate it?
Check the declared skills and available files, then try a small task whose result you can verify. Our archived descriptions and instructions establish publisher claims, not tested runtime quality. Review sources and coverage limits.
