Overview
entry-point-analyzer is an open-source backend skill for Claude Code and compatible agents, published by trailofbits. Its author describes it as: “Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricte…”. The project has 6.6k stars on GitHub and is available under the CC-BY-SA-4.0 license. Add it to your setup with `/plugin marketplace add trailofbits/skills`.
What entry-point-analyzer does
Systematically identify all **state-changing** entry points in a smart contract codebase to guide security audits.
What’s inside
The SKILL.md for entry-point-analyzer is organised into these sections:
- When to Use
- When NOT to Use
- Scope: State-Changing Functions Only
- Workflow
- Slither Integration (Solidity)
- 1. Check if Slither is Available
- 2. If Slither is Detected, Run Entry Points Printer
- 3. Use Slither Output as Foundation
- 4. When Slither is NOT Available
- Language Detection
- Access Classification
- 1. Public (Unrestricted)
Installation
Add entry-point-analyzer to your agent with:
/plugin marketplace add trailofbits/skillsReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- Claude Code — ships a claude code plugin marketplace
License
entry-point-analyzer is published under the CC-BY-SA-4.0 license.
Strengths
- Clear CC-BY-SA-4.0 license — safe to read and adapt within its terms
- Ships in trailofbits/skills, an established project with 6,646 GitHub stars
- Works with Claude Code
- Actively maintained — repository updated in the last 90 days
Author
Topics
Alternatives to entry-point-analyzer
Similar skills from other repositories:
Frequently asked questions
- What does entry-point-analyzer do?
- Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.
- How do I install entry-point-analyzer?
- Run /plugin marketplace add trailofbits/skills in your agent, then reload your skills. Review the source at https://github.com/trailofbits/skills before installing.
- Is entry-point-analyzer free to use?
- Yes. entry-point-analyzer is free and open source under the CC-BY-SA-4.0 license, so you can read, run, and adapt it within that license's terms.
- Which agents does entry-point-analyzer work with?
- entry-point-analyzer lists Claude Code — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does entry-point-analyzer come from?
- entry-point-analyzer ships inside trailofbits/skills, a repository that contains 41 catalogued skills in total. The repository's 6,646 GitHub stars apply to that whole collection, not to this skill on its own.
