entry-point-analyzer
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.
Agent Skill from trailofbits/skills
Copilot Studio
Passes documented load rulesNo documented load rule failed.
Microsoft 365 Copilot Preview, Frontier tenants only
Needs changes- Fails: Every file has a supported file type (M365-FILE-TYPES)
1 unsupported: assets/trail-of-bits-mark.svg
rule · Microsoft 365 Copilot: Supported file and script types
An agent can have at most 8 skills. Custom skills aren't available in tenants that use Microsoft Purview Information Barriers.
Standards signals
Meets the agentskills.io required fields.
| Frontmatter | Present and parsed Spec: frontmatter |
| name | Meets the spec (1-64 chars, a-z 0-9 hyphens) Spec: name |
| description | Present, 1-1,024 characters Spec: description |
| compatibility | Absent or under 500 characters Spec: compatibility |
| Name matches folder | Yes (entry-point-analyzer)Spec: name |
Observed from the public SKILL.md at the commit above on 2026-10-23. Not a certification: AAIF and the Agent Skills project don't certify skills. Validate your own skill with skills-ref validate.
| Source repo | trailofbits/skills |
| Path | plugins/entry-point-analyzer/skills/entry-point-analyzer/SKILL.md |
| Commit checked | 1e0cb77d071a |
| Repo license | CC · we list metadata only |
| Files | 10 |
| Scripts | None |
| Instructions | 10,015 characters |
| Deepest folder | 1 below the skill folder |
| Rules version | 2026-10-22 |
Re-check the latest version How skill checks work
Rule-based checks of public files against Microsoft's documented load rules, not tested in Copilot Studio or Microsoft 365 Copilot. Independent project, not affiliated with Microsoft.