entry-point-analyzer

Identify and classify state-changing entry points in smart contracts.

6.5k|561|Updated Jan 14, 2026
One-click install
npx skills add https://github.com/trailofbits/skills --skill entry-point-analyzer-trailofbits
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: entry-point-analyzer
Source: https://github.com/trailofbits/skills/tree/main/plugins/entry-point-analyzer/skills/entry-point-analyzer
Command: npx skills add https://github.com/trailofbits/skills --skill entry-point-analyzer-trailofbits

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes smart contract codebases to identify state-changing entry points for security auditing, detecting externally callable functions that modify state and excluding read-only patterns.

Core Features & Use Cases

  • Identifies and categorizes entry points by access level (public, admin, role-restricted, contract-only) and generates structured audit reports.
  • Supports multiple ecosystems (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) for cross-project security reviews.
  • Used to map audit flows, external functions, access control patterns, and privileged operations across a codebase.

Quick Start

Run the entry-point-analyzer on your smart contract repository to generate a structured audit report.

Frequently Asked Questions about entry-point-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify state-changing entry points in smart contracts for an audit?▼

To identify state-changing entry points, parse contract files to detect externally callable functions that modify state, categorize them by access level, and generate a structured Markdown audit report excluding read-only patterns.

What are entry points in smart contract security auditing?▼

Entry points in smart contract security are externally callable functions that modify contract state. They are mapped and classified by access control levels like public, admin, role-restricted, or contract-only to review privileged operations.

Can I analyze entry points across different ecosystems like Solana and Solidity?▼

Yes, entry point analysis supports multiple ecosystems including Solidity, Vyper, Solana (Rust), Move, TON, and CosmWasm. It detects language-specific constructs to map access control and generate audit reports across projects.

Does the entry point analyzer work with Slither for Solidity audits?▼

Yes, for Solidity codebases, the analyzer optionally leverages Slither to detect language constructs and map state-changing entry points. This integration assists in generating structured Markdown audit reports for access control flows.

How are identified entry points categorized in the generated audit report?▼

Identified entry points are categorized in the generated audit report by access level, such as public, admin, role-restricted, and contract-only. This structured Markdown output maps external functions and privileged operations across the codebase.