Every token gets shot at before you buy it.
Locksley fires a real buy and sell through the pool inside a dry run, isolates the hook's fee, traces who holds the liquidity and reads what the owner can still do. No wallet, no sign-up, no transaction ever sent.

Four arrows, one verdict
Everything runs live against the chain the moment you open a report.
Buy, transfer, sell
A probe contract stands in for the Universal Router inside a dry-run call: buys with 0.001 ETH, hands half to a second wallet and sells from both. If the sell reverts, it's a honeypot.
Hook fees, isolated
The same swap is replayed with the hook replaced by an empty one. The difference is the hook's real cut, separate from the LP fee and any transfer tax.
Who can pull the pool
Each LP position is traced to its NFT owner: burned, in a locker, held by a contract, or sitting in a wallet that can withdraw any second.
Mint, blacklist, pause, tax
Bytecode is walked opcode by opcode for privileged functions and proxies, cross-checked with Sourcify and Uniswap's hooklist.