skills.rest
Ramprasad4121
Ramprasad4121COMMUNITY
Explore all skills by this author →
WebsiteGitHub

zeroize-audit

Audits C, C++ and Rust codebases for zeroization vulnerabilities using LLVM IR and assembly analysis.

1|Updated Feb 17, 2026
Search Tags:#security audit#memory safety#vulnerability detection#zeroization#compiler optimization#rust security#c security
One-click install
npx skills add https://github.com/Ramprasad4121/srp --skill zeroize-audit-ramprasad4121
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: zeroize-audit
Source: https://github.com/Ramprasad4121/srp/tree/main/skills-repos/trailofbits/plugins/zeroize-audit/skills/zeroize-audit
Command: npx skills add https://github.com/Ramprasad4121/srp --skill zeroize-audit-ramprasad4121

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) and schemas (resource) components.

What problem does it solve?

This Skill automatically audits C/C++/Rust codebases for missing zeroization of sensitive data in memory, and detects when compiler optimizations remove intended wipes.

Core Features & Use Cases

  • Comprehensive Analysis: Detects missing zeroization, partial wipes, and secrets copied across function boundaries.
  • Compiler Optimization Checks: Identifies zeroization calls eliminated by dead-store elimination (DSE) or other optimizations using LLVM IR and assembly analysis.
  • Security Auditing: Essential for reviewing cryptographic implementations, authentication systems, and any code handling sensitive credentials.

Quick Start

Use the zeroize-audit skill to audit the current directory for missing zeroization vulnerabilities.

Frequently Asked Questions about zeroize-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my C or C++ codebase for missing zeroization of sensitive data?▼

You can audit a C or C++ codebase for missing zeroization by running this skill against your current directory, which requires a compile_commands.json file to detect un wiped secrets and partial memory wipes.

Why does the compiler remove my zeroization logic and how can I detect it?▼

Compiler optimizations like dead-store elimination (DSE) can remove zeroization logic, but this skill detects eliminated wipes by analyzing LLVM IR and assembly to ensure sensitive data is actually cleared in memory.

Can I use this security audit tool to check Rust projects for memory safety vulnerabilities?▼

Yes, you can audit Rust projects for memory safety vulnerabilities related to zeroization, but you must provide a Cargo.toml file instead of the compile_commands.json required for C/C++ analysis.

What types of zeroization flaws and vulnerability detection does this security audit cover?▼

This security audit covers vulnerability detection for missing zeroization calls, partial wipes, secrets copied across function boundaries, and zeroization logic removed by compiler optimizations using LLVM IR analysis.

Do I need pypdf or pdfplumber dependencies to run a memory safety and zeroization audit?▼

While pypdf, pdfplumber, and pdf2image are listed as dependencies, the core memory safety and zeroization audit specifically requires a compile_commands.json for C/C++ or a Cargo.toml for Rust projects.

Related Skills

Explore More Software Engineering Skills→
iiammaeiiammae

zeroize-audit

Detect missing zeroization of sensitive data in C/C++/Rust source code.

Community
Advanced
bbohhu-progbbohhu-prog

pdf

Process and validate PDF documents to preserve layout fidelity.

Community
Intermediate
manuelbrandner85manuelbrandner85

zeroize-audit

Detect missing or compiler-optimized zeroization in C, C++, and Rust source code.

Community
Advanced
backengineeringbackengineering
434

dynamic-instrumentation

Instrument binaries and trace runtime behavior using LLVM infrastructure.

Official
Advanced