Entry Point Analyzer
Plugin Verified ActiveAnalyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level, and generates structured audit reports.
To automate the identification and classification of state-changing entry points in smart contract codebases, thereby streamlining the security auditing process and highlighting the critical attack surface.
Features
- Detects state-changing entry points in smart contracts
- Classifies functions by access level (public, role-restricted, contract-only)
- Supports multiple smart contract languages (Solidity, Vyper, etc.)
- Generates structured markdown audit reports
- Excludes read-only functions from analysis
Use Cases
- Initiating a smart contract security audit
- Mapping the attack surface of a smart contract
- Identifying privileged operations and role-based access controls
- Finding all externally callable functions that can modify contract state
Non-Goals
- Detecting specific vulnerabilities or exploit patterns
- Performing code quality or gas optimization analysis
- Analyzing non-smart-contract codebases
- Identifying read-only functions or data retrieval methods
Trust
- info:Issues Attention13 issues were opened and 4 closed in the last 90 days, indicating some engagement but also a potential for slower response times on open issues.
Installation
First, add the marketplace
/plugin marketplace add trailofbits/skills/plugin install entry-point-analyzer@trailofbitsQuality Score
VerifiedTrust Signals
Similar Extensions
Property Based Testing
97Property-based testing guidance for multiple languages and smart contracts
Blockchain Web3
98Smart contract development with Solidity, DeFi protocol implementation, NFT platforms, and Web3 application architecture
Dotforge
100Node.js 20+ with Express/Fastify, TypeScript, and ESM module rules for Claude Code.
Review Agent Governance
99Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI config. Cedar-gated, receipt-signed, designed for the Hermes-style failure mode where a review bot posts without oversight.
HubSpot Admin Skills
99Complete HubSpot CRM administration toolkit — audit, clean, enrich, segment, automate, and maintain your database
C4 Architecture
99Comprehensive C4 architecture documentation workflow with bottom-up code analysis, component synthesis, container mapping, and context diagram generation