diff --git a/skills/query-token-audit/SKILL.md b/skills/query-token-audit/SKILL.md
new file mode 100644
index 00000000..05fb6f43
--- /dev/null
+++ b/skills/query-token-audit/SKILL.md
@@ -0,0 +1,155 @@
+---
+id: query-token-audit
+name: Query Token Audit
+description: Query token security audit details to detect scams, honeypots, malicious contract risks, and dangerous trading conditions before swapping.
+category: Blockchain
+author: binance-web3-team
+version: 1.4.0
+requires: []
+examples:
+  - Check if this BSC token is safe before I buy it.
+  - Audit this Base token contract for honeypot and scam risk.
+  - Run a token security check on this Solana contract and summarize the risk items.
+---
+
+# Query Token Audit Skill
+
+## Overview
+
+| API | Function | Use Case |
+|-----|----------|----------|
+| Token Security Audit | Token security scan | Detect honeypot, rug pull, scam, malicious functions |
+
+## Use Cases
+
+1. **Pre-Trade Safety Check**: Verify token security before buying or swapping
+2. **Scam Detection**: Identify honeypots, fake tokens, and malicious contracts
+3. **Contract Analysis**: Check for dangerous ownership functions and hidden risks
+4. **Tax Verification**: Detect unusual buy/sell taxes before trading
+
+## Supported Chains
+
+| Chain Name | chainId |
+|------------|---------|
+| BSC | 56 |
+| Base | 8453 |
+| Solana | CT_501 |
+| Ethereum | 1 |
+
+---
+
+## API: Token Security Audit
+
+### Method: POST
+
+**URL**:
+`https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit`
+
+**Request Parameters**:
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| binanceChainId | string | Yes | Chain ID: `CT_501` (Solana), `56` (BSC), `8453` (Base), `1` (Ethereum) |
+| contractAddress | string | Yes | Token contract address |
+| requestId | string | Yes | Unique request ID (UUID v4 format) |
+
+**Request Headers**:
+```text
+Content-Type: application/json
+Accept-Encoding: identity
+```
+
+**Example Request**:
+```bash
+curl --location 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit' \
+--header 'Content-Type: application/json' \
+--header 'source: agent' \
+--header 'Accept-Encoding: identity' \
+--data '{
+  "binanceChainId": "56",
+  "contractAddress": "0x55d398326f99059ff775485246999027b3197955",
+  "requestId": "'$(uuidgen)'"
+}'
+```
+
+**Response Example**:
+```json
+{
+  "code": "000000",
+  "data": {
+    "requestId": "d6727c70-de6c-4fad-b1d7-c05422d5f26b",
+    "hasResult": true,
+    "isSupported": true,
+    "riskLevelEnum": "LOW",
+    "riskLevel": 1,
+    "extraInfo": {
+      "buyTax": "0",
+      "sellTax": "0",
+      "isVerified": true
+    },
+    "riskItems": [
+      {
+        "id": "CONTRACT_RISK",
+        "name": "Contract Risk",
+        "details": [
+          {
+            "title": "Honeypot Risk Not Found",
+            "description": "A honeypot is a token that can be bought but not sold",
+            "isHit": false,
+            "riskType": "RISK"
+          }
+        ]
+      }
+    ]
+  },
+  "success": true
+}
+```
+
+**Response Fields**:
+
+| Field | Type | Description |
+|-------|------|-------------|
+| hasResult | boolean | Whether audit data is available |
+| isSupported | boolean | Whether the token is supported for audit |
+| riskLevelEnum | string | Risk level: `LOW`, `MEDIUM`, `HIGH` |
+| riskLevel | number | Risk level number (1-5) |
+| extraInfo.buyTax | string | Buy tax percentage (null if unknown) |
+| extraInfo.sellTax | string | Sell tax percentage (null if unknown) |
+| extraInfo.isVerified | boolean | Whether contract code is verified |
+| riskItems[].id | string | Risk category: `CONTRACT_RISK`, `TRADE_RISK`, `SCAM_RISK` |
+| riskItems[].details[].title | string | Risk check title |
+| riskItems[].details[].description | string | Risk check description |
+| riskItems[].details[].isHit | boolean | true = risk detected |
+| riskItems[].details[].riskType | string | `RISK` (critical) or `CAUTION` (warning) |
+
+**Risk Level Reference**:
+
+| riskLevel | riskLevelEnum | Action | Description |
+|-----------|---------------|--------|-------------|
+| 0-1 | LOW | Proceed with caution | Lower risk detected, but not guaranteed safe. DYOR. |
+| 2-3 | MEDIUM | Exercise caution | Moderate risks detected, review risk items carefully |
+| 4 | HIGH | Avoid trading | Critical risks detected, high probability of loss |
+| 5 | HIGH | Block transaction | Severe risks confirmed, do not proceed |
+
+**IMPORTANT**: LOW risk does not mean "safe." Audit results are point-in-time snapshots. Project teams can modify contracts or restrict liquidity after purchase. These risks cannot be predicted in advance.
+
+**Result Validity**:
+
+Audit results are valid only when both conditions are met:
+- `hasResult: true` - Audit data is available
+- `isSupported: true` - Token is supported for audit
+
+When invalid, do not display risk level or security checks.
+
+---
+
+## Notes
+
+1. All numeric fields may be returned in string format; convert when needed
+2. Audit results are valid only when `hasResult: true` and `isSupported: true`
+3. `riskLevel: 5` means transaction should be blocked; `riskLevel: 4` is high risk
+4. Tax thresholds: above 10% is critical, 5-10% is warning, below 5% is acceptable
+5. Generate a unique UUID v4 for each audit request
+6. Output only security check risk flags; do not provide investment advice
+7. Always end with this disclaimer: `This audit result is for reference only and does not constitute investment advice. Always conduct your own research.`