entry-point-analyzer
快速映射合约攻击面与权限模型，适合合约审计与安全评估工作。
分析私有代码可能需要仓库访问，注意敏感数据与密钥暴露风险。
识别智能合约中修改状态的对外入口并按访问级别分类，生成结构化审计报告。
识别智能合约里所有会改状态的对外入口，按公开/管理员/角色/仅合约调用等访问级别分类并产出结构化审计清单。适合在做 Solidity、Vyper、Solana/Rust、Move、TON、CosmWasm 等合约审计或绘制攻击面时使用。它只关注会改状态的函数（排除 view/pure），让审计更聚焦真实危险点。
▸ 展开 SKILL.md 英文原文
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.
帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/entry-point-analyzer/skills/entry-point-analyzer/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/entry-point-analyzer/skills/entry-point-analyzer/SKILL.md"# Entry Point Analyzer Systematically identify all **state-changing** entry points in a smart contract codebase to guide security audits. ## When to Use Use this skill when: - Starting a smart contract security audit to map the attack surface - Asked to find entry points, external functions, or audit flows - Analyzing access control patterns across a codebase - Identifying privileged operations and role-restricted functions - Building an understanding of which functions can modify contract state ## When NOT to Use Do NOT use this skill for: - Vulnerability detection (use audit-context-building or domain-specific-audits) - Writing exploit POCs (use solidity-poc-builder) - Code quality or