An unknown token can be put through its paces in about half an hour, and doing so requires neither programming skills nor a subscription. The core of the exercise comes down to three questions: who stands behind the project, who owns the tokens, and how much of that can be looked up independently?