Analyze incoming and outgoing calls for Solidity functions using LSP call hierarchy with recursive depth tracing and manual grep for low-level calls. Use when analyzing call graphs, tracing call chains, auditing external calls, or checking reentrancy surfaces in Solidity contracts.
Enumerate state-changing entrypoints in Solidity contracts, trace user-supplied parameters into state mutations and external calls, and flag unsanitized inputs. Use when auditing attack surface, reviewing access control, checking input validation, or scoping a security review.
Generate Foundry proof-of-concept tests that validate HIGH and CRITICAL security findings. Produces runnable Solidity test files with attack contracts, setup scaffolding, and pass/fail assertions. Use after running entrypoint-analysis or call-analysis when findings need validation.