Zeroize Audit
插件 活跃Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis
To provide developers and security auditors with a robust tool for identifying and verifying vulnerabilities related to the improper handling and zeroization of sensitive data in code.
功能
- Detects missing zeroization in source code
- Identifies zeroization removed by compiler optimizations
- Performs assembly-level analysis for stack/register security
- Generates proof-of-concept exploits for verified findings
- Analyzes C, C++, and Rust codebases
使用场景
- Auditing cryptographic implementations for secure data handling
- Reviewing authentication systems for secrets management flaws
- Verifying secure cleanup procedures in security-critical code
- Investigating memory safety issues concerning sensitive data
非目标
- General code review or performance optimization outside of security
- Refactoring code unrelated to sensitive data handling
- Replacing a full static analysis suite for non-security-related bugs
Trust
- warning:Issues Attention13 issues opened and 4 closed in the last 90 days suggests slow maintainer response to open issues (closure rate < 10%).
安装
请先添加 Marketplace
/plugin marketplace add trailofbits/skills/plugin install zeroize-audit@trailofbits质量评分
类似扩展
Arm Cortex Microcontrollers
100ARM Cortex-M firmware development for Teensy, STM32, nRF52, and SAMD with peripheral drivers and memory safety patterns
C4 Architecture
99Comprehensive C4 architecture documentation workflow with bottom-up code analysis, component synthesis, container mapping, and context diagram generation
Dimensional Analysis
99Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol. Prevents dimensional mismatches and catches formula bugs early.
Ruflo Knowledge Graph
99Knowledge graph construction — entity extraction, relation mapping, and pathfinder graph traversal
Ruflo Ruvector
98Self-learning vector database via npx ruvector@0.2.25 — HNSW, adaptive LoRA embeddings, code-graph clustering, hooks routing, brain/SONA, 103 MCP tools
Everything Claude Code
97Battle-tested Claude Code plugin for engineering teams — 60 agents, 228 skills, 75 legacy command shims, production-ready hooks, and selective install workflows evolved through continuous real-world use