entry-point-analyzer

entry-point-analyzer is an open-source backend skill for Claude Code and compatible agents, published by trailofbits. Its author describes it as: “Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricte…”. The project has 6.6k stars on GitHub and is available under the CC-BY-SA-4.0 license. Add it to your setup with `/plugin marketplace add trailofbits/skills`.

What entry-point-analyzer does

Systematically identify all **state-changing** entry points in a smart contract codebase to guide security audits.

Installation

Add entry-point-analyzer to your agent with:

/plugin marketplace add trailofbits/skills

Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.

What's inside

The SKILL.md for entry-point-analyzer is organised into these sections:

• When to Use
• When NOT to Use
• Scope: State-Changing Functions Only
• Workflow
• Slither Integration (Solidity)
• 1. Check if Slither is Available
• 2. If Slither is Detected, Run Entry Points Printer
• 3. Use Slither Output as Foundation
• 4. When Slither is NOT Available
• Language Detection
• Access Classification
• 1. Public (Unrestricted)

When to use it

Reach for entry-point-analyzer when you want backend help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.

Strengths

• Clear CC-BY-SA-4.0 license — safe to read and adapt
• Ships in trailofbits/skills, an established project with 6,646 GitHub stars
• Actively maintained (recent commits)

Topics

Frequently asked questions

What does entry-point-analyzer do?

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.

How do I install entry-point-analyzer?

Run /plugin marketplace add trailofbits/skills in your agent, then reload your skills. Review the source at https://github.com/trailofbits/skills before installing.

Is entry-point-analyzer free to use?

Yes. entry-point-analyzer is free and open source under the CC-BY-SA-4.0 license, so you can read, run, and adapt it within that license's terms.

Where does entry-point-analyzer come from?

entry-point-analyzer ships inside trailofbits/skills, a repository that contains 41 catalogued skills in total. The repository's 6,646 GitHub stars apply to that whole collection, not to this skill on its own.