entry point analyzer

Name: entry point analyzer
Author: trailofbits

by trailofbits·18d ago

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally cal…

Claude CodeMedium risk · 中风险open source · 开源

Editor's verdict· 编辑结论

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Exc…
— Editorial team · 编辑团队

Install via Skills CLI

Use npx skills add to install this skill into the selected agent. Phase 0 commands are generated from source rules, not verified.

Codex

npx skills add https://github.com/trailofbits/skills/blob/main/plugins/entry-point-analyzer/skills/entry-point-analyzer/SKILL.md -g -a codex -y

Drop `-g` to install project-locally

✓

Best for适合什么场景

Detect Language - Identify contract language(s) from file extensions and syntax
Classify Access - Categorize each function by access level
Generate Report - Output structured markdown report

✗

Not for不适合什么场景

Workflows that require stronger human review than this catalog entry documents.需要比当前目录条目更严格人工复核的工作流。

vs alternativesvs 其他选择

Full compare table完整对比表 →

#1xlsx

xlsx: agent skill — from anthropics/skills.

132k stars

diff · 差异Best for the cleanup-validate-analyze loop on real-world spreadsheets — inconsistent date formats, mixed types in "numeric" columns, hidden merged cells, schemas that change row-by-row. Reads the file, surfaces structural issues before they corrupt downstream analysis. Strongest on messy production-data scenarios. Skip it for clean exported data; that's just pandas.

#2graphify

graphify: agent skill — from safishamsi/graphify.

46k stars

diff · 差异Best when relationships matter more than rows — knowledge graphs over flat tables, entity-and-edge extraction from text, querying multi-hop connections (who introduced whom, which dependency led where). Strongest on research workflows where you need to trace links across messy sources. Skip it for tabular aggregations; a spreadsheet beats a graph there.

#3customer research

customer research: agent skill — from coreyhaines31/marketingskills.

28k stars

diff · 差异Best for synthesizing customer interviews, support logs, and survey results into ranked insights you can actually act on. Tagged-quote extraction, theme clustering, and prioritization without losing the original speaker context. Strongest when you have raw qualitative data piling up. Skip it for quantitative analytics; that's xlsx or graphify's job.

Side-by-side compare维度对比

Key differences with same-lane alternatives

	this skill · 当前entry point analyzer	xlsx	graphify	customer research
Rating · 评分	—	—	—	—
Stars · 星标	5.1k	132k	46k	28k
Risk · 风险	Medium risk · 中风险	Low risk · 低风险	Low risk · 低风险	Low risk · 低风险
Best for · 最适合	Detect Language - Identify contract language(s) from file extensions and syntax	xlsx: agent skill — from anthropics/skills.	graphify: agent skill — from safishamsi/graphify.	customer research: agent skill — from coreyhaines31/marketingskills.
Not for · 不适合	Workflows that require stronger human review than this catalog entry documents.	Workflows that require stronger human review than this catalog entry documents.	Workflows that require stronger human review than this catalog entry documents.	Workflows that require stronger human review than this catalog entry documents.

Audit notes审计备注

last reviewed 2026-06-03 · 复查

Source源码open on GitHub · 公开✓

Author作者community · 社区!

Network网络访问network access · 需联网✓

Filesystem文件写入writes to repo · 写入仓库!

Dependencies依赖many deps · 依赖较多✓

Telemetry遥测none · 无✓