
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
@apexacc/audit
Advanced tools
Web3 Security Scanner — 18 tools for DYOR and smart contract auditing.
Built by Apex Foundation.
Apex Audit is an MCP server exposing 18 security tools directly inside your AI assistant. Scan tokens, wallets, and smart contracts without leaving your workflow.
npx @apexacc/audit
Get your token at audit.apexaccs.org/dashboard. Paste it on first launch. Done.
| Tool | What it does |
|---|---|
audit_token_risk | Aggregated SAFE / WARN / DANGER verdict, score 0–100 |
audit_honeypot | Simulates buy + sell before you buy. Detects blocked withdrawals |
audit_wallet_risk | Dangerous approvals, drainers, scam contract interactions |
audit_social_auth | Bot ratio, engagement quality, impersonation flags |
audit_rug_pull | Liquidity lock, insider concentration, dump patterns |
audit_whale_tracker | Top holder movements, dump signals |
audit_creator_history | Deployer past scams across all chains |
audit_lp_scan | LP lock status, unlocks next 90 days, buy / sell taxes |
audit_deepfake | Fake celebrity / fund accounts, AI-generated content flags |
| Tool | What it does |
|---|---|
audit_full_contract | Slither + static analysis, 15+ vulnerability classes |
audit_access_control | Who holds mint, pause, upgrade rights. Multi-sig check |
audit_onchain_forensics | Transaction tracing, wallet clustering, linked addresses |
audit_jurisdiction | 28 jurisdictions ranked for your project profile |
audit_report_generator | Structured audit report ready for investors |
audit_contract_compare | Fork detection against 2.4M verified contracts |
audit_fund_match | 400+ Web3 funds matched to your project |
audit_token_security_api | GoPlus + Slither + CertiK aggregated in one call |
audit_diff_checker | What changed since the last audit. New vulnerabilities flagged |
Use Apex Audit tools from any MCP-compatible client — Claude.ai, Claude Code, Cursor, Windsurf, Cline:
{
"mcpServers": {
"apex-audit": {
"command": "node",
"args": ["/path/to/apex-audit-mcp/dist/server.js"]
}
}
}
Or run npx @apexacc/audit to auto-configure Claude Desktop.
Add a badge to your project after passing an Apex Audit:
Safe:

Danger:

Token addresses, wallet addresses, and contract source are sent to Apex Audit servers for analysis. No private keys are ever required or transmitted.
FAQs
Unknown package
The npm package @apexacc/audit receives a total of 0 weekly downloads. As such, @apexacc/audit popularity was classified as not popular.
We found that @apexacc/audit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.