entry-point-analyzer

Identify and classify state-changing entry points in smart contracts.

6.5k|561|Updated Jan 14, 2026
One-click install
npx skills add https://github.com/trailofbits/skills --skill entry-point-analyzer-trailofbits
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: entry-point-analyzer
Source: https://github.com/trailofbits/skills/tree/main/plugins/entry-point-analyzer/skills/entry-point-analyzer
Command: npx skills add https://github.com/trailofbits/skills --skill entry-point-analyzer-trailofbits

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes smart contract codebases to identify state-changing entry points for security auditing, detecting externally callable functions that modify state and excluding read-only patterns.

Core Features & Use Cases

  • Identifies and categorizes entry points by access level (public, admin, role-restricted, contract-only) and generates structured audit reports.
  • Supports multiple ecosystems (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) for cross-project security reviews.
  • Used to map audit flows, external functions, access control patterns, and privileged operations across a codebase.

Quick Start

Run the entry-point-analyzer on your smart contract repository to generate a structured audit report.

Frequently Asked Questions about entry-point-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify state-changing entry points in smart contracts for an audit?

To identify state-changing entry points, parse contract files to detect externally callable functions that modify state, categorize them by access level, and generate a structured Markdown audit report excluding read-only patterns.

What are entry points in smart contract security auditing?

Entry points in smart contract security are externally callable functions that modify contract state. They are mapped and classified by access control levels like public, admin, role-restricted, or contract-only to review privileged operations.

Can I analyze entry points across different ecosystems like Solana and Solidity?

Yes, entry point analysis supports multiple ecosystems including Solidity, Vyper, Solana (Rust), Move, TON, and CosmWasm. It detects language-specific constructs to map access control and generate audit reports across projects.

Does the entry point analyzer work with Slither for Solidity audits?

Yes, for Solidity codebases, the analyzer optionally leverages Slither to detect language constructs and map state-changing entry points. This integration assists in generating structured Markdown audit reports for access control flows.

How are identified entry points categorized in the generated audit report?

Identified entry points are categorized in the generated audit report by access level, such as public, admin, role-restricted, and contract-only. This structured Markdown output maps external functions and privileged operations across the codebase.