entry-point-analyzer

Detect state-changing entry points in smart contract codebases.

Updated Feb 24, 2026
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill entry-point-analyzer-ofelixdev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: entry-point-analyzer
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/entry-point-analyzer
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill entry-point-analyzer-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically identifies all state-changing entry points in smart contract codebases, crucial for security audits by mapping the attack surface.

Core Features & Use Cases

  • State-Changing Function Identification: Detects and categorizes functions that modify contract state, excluding read-only operations.
  • Access Control Analysis: Classifies functions by access level (public, role-restricted, contract-only).
  • Multi-Language Support: Analyzes Solidity, Vyper, Solana, Move, TON, and CosmWasm.
  • Use Case: When starting a smart contract security audit, use this Skill to get a comprehensive list of all functions that can alter contract state, along with their access controls, to prioritize testing.

Quick Start

Use the entry-point-analyzer skill to analyze the smart contracts in the current directory for state-changing functions.

Frequently Asked Questions about entry-point-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify state-changing entry points for a smart contract security audit?

Mapping smart contract attack surfaces involves detecting externally callable functions that alter state and classifying them by access controls like public or role-restricted. It is needed when prioritizing security testing to focus on functions that can modify contract state.

Can I analyze Vyper and Solidity smart contracts for externally callable functions?

Yes, you can analyze Vyper and Solidity smart contracts for externally callable functions. The analysis detects state-changing functions across multiple blockchain languages, categorizing them by access level while filtering out read-only operations to generate structured audit reports.

Does the entry-point analyzer exclude view and pure functions from the audit report?

To start mapping your contract's attack surface, use the analyzer to scan the smart contracts in your current directory. It will process the codebase, identify state-changing functions, categorize them by access level, and output a structured audit report for security testing.

What is the best way to categorize smart contract functions by access level for an audit?

The best way to categorize smart contract functions by access level for an audit is to use an analyzer that classifies state-changing functions as public, role-restricted, or contract-only. This structured approach prioritizes testing for externally callable vulnerabilities.