entry-point-analyzer

Identify state-changing entry points in smart contract codebases and classify access levels.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/1203992808/ChatGPTCaricature --skill entry-point-analyzer-1203992808
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: entry-point-analyzer
Source: https://github.com/1203992808/ChatGPTCaricature/tree/main/.claude/skills/entry-point-analyzer
Command: npx skills add https://github.com/1203992808/ChatGPTCaricature --skill entry-point-analyzer-1203992808

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill systematically identifies all state-changing entry points within smart contract codebases, crucial for security audits by mapping the potential attack surface.

Core Features & Use Cases

  • State-Changing Function Identification: Detects and lists functions that can modify contract state, excluding read-only operations.
  • Access Level Classification: Categorizes functions by visibility (Public, Role-Restricted, Contract-Only) to understand access control.
  • Use Case: When beginning a security audit for a new DeFi protocol, use this Skill to quickly generate a comprehensive list of all functions that can alter critical protocol parameters or user balances.

Quick Start

Analyze the smart contract codebase in the current directory to find all state-changing entry points and classify their access levels.

Frequently Asked Questions about entry-point-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find state-changing entry points in a smart contract for a security audit?

To find state-changing entry points for a security audit, you can analyze the smart contract codebase to detect externally callable functions that modify state, categorizing them by access level like public or role-restricted.

How do I audit access control patterns for external functions in Solidity or Vyper?

You can audit access control patterns by analyzing the codebase to identify external functions and categorizing their visibility into public, admin, role-restricted, or contract-only levels to understand privileged operations.

Does this smart contract analysis exclude view and pure read-only functions?

Yes, smart contract state-changing entry point analysis specifically excludes view, pure, and read-only functions, focusing entirely on operations that can alter contract state or critical parameters.

Can I use this entry point detection for Solana Rust, Move, or CosmWasm contracts?

Yes, entry point detection supports auditing smart contracts across multiple languages including Solidity, Vyper, Solana/Rust, Move, TON, and CosmWasm to find external functions and privileged operations.

What is the best way to map the attack surface of a new DeFi protocol?

The best way to map a DeFi protocol attack surface is to generate a comprehensive structured audit report of all state-changing entry points, categorizing externally callable functions by their access levels.

Why should I identify privileged operations and admin functions before a smart contract audit?

Identifying privileged operations and admin functions before an audit is crucial because these state-changing entry points represent the protocol's access control surface, revealing where critical parameters or balances can be altered.