skills.rest
woohyun212
woohyun212COMMUNITY
Explore all skills by this author →
WebsiteGitHub

entry-point-analyzer

Identify and classify state-changing entry points in smart contracts, web APIs, and CLI tools.

21|1|Updated Apr 12, 2026
Search Tags:#security#vulnerability#audit#analysis#entrypoint#smartcontracts#attacksurface
One-click install
npx skills add https://github.com/woohyun212/security-skill --skill entry-point-analyzer-woohyun212
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: entry-point-analyzer
Source: https://github.com/woohyun212/security-skill/tree/main/entry-point-analyzer
Command: npx skills add https://github.com/woohyun212/security-skill --skill entry-point-analyzer-woohyun212

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies and classifies every state‑changing entry point in smart contracts, web APIs, and CLI tools, giving security analysts a clear attack surface map.

Core Features & Use Cases

  • Automated discovery of external/public, admin‑only, payable, callback, fallback, delegatecall, and web/CLI mutation entry points.
  • Access‑control analysis highlighting unprotected functions and potential vulnerabilities.
  • Prioritized risk summary that feeds directly into audits, bug‑bounty scoping, threat modeling, and compliance reviews.

Quick Start

Ask the AI to analyze the target codebase and generate an attack surface report for your smart contract project.

Frequently Asked Questions about entry-point-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify all state-changing entry points in smart contracts?▼

To identify state-changing entry points in smart contracts, you can automatically discover external, public, payable, and callback functions to generate a comprehensive attack surface map.

Can I audit web API mutation endpoints and CLI tools for access-control gaps?▼

Yes, you can audit web API mutation endpoints and CLI sub-commands to enumerate callbacks and highlight unprotected functions with potential access-control vulnerabilities.

What is the best way to prioritize an attack surface for a Solidity security audit?▼

The best way to prioritize an attack surface for a Solidity security audit is to generate a risk-rated summary that highlights access-control gaps and mitigation recommendations.

Does this analysis work with Rust, Solana, and Move contracts?▼

Yes, this analysis works with Solidity, Rust, Solana, and Move contracts, as well as REST and GraphQL endpoints, to enumerate all state-changing functions.

How do I map delegatecall and fallback vulnerabilities during threat modeling?▼

To map delegatecall and fallback vulnerabilities during threat modeling, apply automated discovery to classify these entry points and highlight unprotected functions in the prioritized risk summary.

Related Skills

Explore More Software Engineering Skills→
SuperlendSuperlend

entry-point-analyzer

Identify state-changing entry points in smart contract codebases.

Official
Advanced
mcouthonmcouthon
77

security-review

Analyze code changes to identify vulnerabilities and map attack surfaces.

Community
Advanced
naporin0624naporin0624
3

cve-search

Query the NVD CVE database for known vulnerabilities with keyword and severity filters.

Community
Intermediate
RIMTHAN-LABRIMTHAN-LAB
1

owasp-mobile-security-checker

Analyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.

Official
Intermediate