Zeroize Audit
Skill Verified ActiveDetects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
To enhance security reviews by automatically detecting and verifying vulnerabilities related to sensitive data handling and zeroization in compiled languages.
Features
- Detects missing zeroization in C/C++/Rust
- Identifies compiler optimizations removing zeroization
- Performs assembly-level analysis
- Verifies zeroization across control-flow paths
- Generates proof-of-concept exploit examples
Use Cases
- Auditing cryptographic implementations for secure key handling
- Reviewing authentication systems for exposed credentials
- Verifying secure cleanup in security-critical codebases
- Investigating memory safety of sensitive data handling
Non-Goals
- General code review without a security focus
- Performance optimization unrelated to secure wiping
- Refactoring tasks not related to sensitive data
- Code without identifiable secrets or sensitive values
Installation
First, add the marketplace
/plugin marketplace add trailofbits/skills/plugin install zeroize-audit@trailofbitsQuality Score
VerifiedTrust Signals
Similar Extensions
Debugging Code
99Interactively debug source code — set breakpoints, step through execution line by line, inspect live variable state, evaluate expressions against the running program, and navigate the call stack to trace root causes. Use when a program crashes, raises unexpected exceptions, produces wrong output, when you need to understand how execution reached a certain state, or when print-statement debugging isn't revealing enough.
Janitor Usage
100Show which skills you use and which you never use
Lean Ctx
100Context Runtime for AI Agents — 59 MCP tools, 10 read modes, 95+ shell patterns, tree-sitter AST for 18 languages. Compresses LLM context by up to 99%. Use when reading files, running shell commands, searching code, or exploring directories. Auto-installs if not present.
Cleanup Cycles
100Detect and untangle circular dependencies. Runs madge/skott (TS), pycycle (Py), or compiler-only checks (Go/Rust). Auto-fixes leaf-extractable cycles; reports core cycles for human review. Use when the user asks to find circular imports, fix dependency cycles, or untangle module graph. Example queries — "find circular imports", "fix dependency cycles", "untangle our module graph", "why is madge complaining".
Running Tend
100Worktrunk-specific guidance for tend CI workflows. Adds codecov polling, Rust test commands, labels, and review criteria on top of the generic tend-* skills. Use when operating in CI.
Secrets Management
100Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.