---
title: "Entry Point Analyzer - Air Market"
description: "Before auditing a smart contract you need to know where it can be poked from the outside. This finds the externally callable functions that actually change state, sorts them by who is allowed to call…"
canonical: "https://airmarket.ai/app/entry-point-analyzer"
---

[Air Market](/) / [Security](/category/security) / Entry Point Analyzer

Skill by [Trail of Bits](/@trailofbits)

# Entry Point Analyzer

Find every way an outsider can change your contract's state

## What this does

Before auditing a smart contract you need to know where it can be poked from the outside. This finds the externally callable functions that actually change state, sorts them by who is allowed to call them - anyone, an admin, a role, another contract - and writes it up. Read-only functions are left out.

### Top 3 things it does for you

- List the functions outsiders can call to change state
- See which operations are admin-only
- Map the access control on a contract

## Information

**Entry Point Analyzer at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Trail of Bits](/@trailofbits) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 43 KB |
| Licence | CC-BY-SA-4.0 |
| Repository | [trailofbits/skills](https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/entry-point-analyzer/skills/entry-point-analyzer) |
| GitHub stars | 6,823 (as of Nov 2026) |
| Installs | 6,198, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Entry Point Analyzer and flagged nothing. AIR's verdict: **safe**.

**What Entry Point Analyzer's check was run against**

|  |  |
| --- | --- |
| Commit | d5fe2e6a7896236c3102fd5477e833623ad70298 |
| Content hash | cb6f8e849852297b4a044a2bccdd445038be153661e70f6712b5d6243ba1919a |
| Files read | [Browse the files at this exact commit](https://github.com/trailofbits/skills/blob/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/entry-point-analyzer/skills/entry-point-analyzer/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Entry Point Analyzer](/security/entry-point-analyzer)

## About Entry Point Analyzer

This analyzes smart contract codebases to identify state-changing entry points for security auditing. It detects externally callable functions that modify state and categorizes them by access level - public, admin, role-restricted, or contract-only - excluding view, pure, and read-only functions.

The result is a structured audit report.

Use it when auditing smart contracts in Solidity, Vyper, Solana/Rust, Move, TON, or CosmWasm, or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.

## What's inside

- SKILL.md - instructions
- agents/openai.yaml - data
- assets/trail-of-bits-mark.svg - template
- references/cosmwasm.md - reference
- references/move-aptos.md - reference
- references/move-sui.md - reference
- references/solana.md - reference
- references/solidity.md - reference
- references/ton.md - reference
- references/vyper.md - reference

## Questions

### Is Entry Point Analyzer safe to install?

AIR scanned this exact version of Entry Point Analyzer and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d5fe2e6a7896, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/entry-point-analyzer.

### How do I install Entry Point Analyzer?

Open https://airmarket.ai/app/entry-point-analyzer on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/entry-point-analyzer/skills/entry-point-analyzer. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by Trail of Bits](/@trailofbits)

---

Canonical URL: <https://airmarket.ai/app/entry-point-analyzer>