entry-point-analyzer

The entry-point-analyzer skill is designed to assist security auditors and developers in identifying all state-changing entry points within a smart contract codebase. Its primary goal is to map externally callable functions that modify contract state, categorize them based on access level, and produce structured audit reports. By focusing exclusively on functions that can alter state, it ensures that auditors can prioritize potential security risks, avoiding distractions from read-only or informational functions. This skill supports multiple smart contract languages, including Solidity, Vyper, Solana/Rust, Move, TON, and CosmWasm, making it versatile for cross-platform contract audits.

Key features of entry-point-analyzer include automatic detection of contract language, parsing files for externally callable functions, and classifying functions by access levels such as public, admin, role-restricted, or contract-only. It integrates with tools like Slither for Solidity, allowing automated extraction of entry points, while providing fallback procedures for manual analysis when automated tooling is unavailable. The skill explicitly excludes view, pure, and query functions to focus on operations that can modify the state, ensuring a targeted and efficient audit workflow. Additionally, it produces structured reports in markdown format, supporting organized documentation of findings and analysis.

Typical use cases for this skill include initiating a smart contract security audit, analyzing access control patterns, identifying privileged operations, and mapping potential attack surfaces. Target users are security auditors, smart contract developers, and teams performing formal verification or compliance reviews. By systematically identifying critical state-changing functions, entry-point-analyzer helps users understand contract vulnerabilities, guide audit priorities, and strengthen the overall security posture of blockchain-based applications.