entry-point-analyzer

What this skill does

Systematically discovers and classifies all state-changing entry points in smart contracts (Solidity, Rust/Solana, Move), web APIs, and CLI tools. For each entry point the skill records its type, access control, mutability, and payability — then produces a prioritized attack surface summary that feeds directly into vulnerability testing, threat modeling, and compliance reviews.

Entry point types covered:

• External/public functions — callable by any address or user
• Admin-only functions — gated by onlyOwner, roles, or multisig
• Payable functions — accept ETH or native token transfers
• Callback handlers — onERC721Received, uniswapV3SwapCallback, flashLoan receivers, etc.
• Fallback/receive functions — fallback() and receive() in Solidity
• Delegatecall targets — proxy implementations and libraries called via delegatecall
• Web API endpoints — REST mutations, GraphQL mutations, WebSocket message handlers
• CLI sub-commands — sub-commands that mutate state or invoke privileged operations

When to use

• Before starting a deep audit: enumerate what can be called and by whom before reading logic
• When scoping a bug bounty engagement: identify unprotected state-changing paths quickly
• When reviewing a protocol upgrade: compare old vs new entry point sets for regressions
• When building a threat model: entry points are the canonical input for threat modeling exercises
• When triaging a reported vulnerability: confirm which entry point the exploit traverses
• When assessing a web API surface: map all mutation endpoints before testing authorization

Prerequisites

• Read access to the contract source or API codebase
• For Solidity contracts: ripgrep or grep available:

  # Debian/Ubuntu
  apt install ripgrep
  # macOS
  brew install ripgrep
  

• (Optional) Slither for automated function classification in Solidity:

  pip install slither-analyzer
  

• (Optional) solc-select to match the project's compiler version:

  pip install solc-select
  solc-select install 0.8.26 && solc-select use 0.8.26
  

• Environment variable SECSKILL_TARGET: path to the source root being analyzed