skills.rest
rohanbhatia27
rohanbhatia27COMMUNITY
Explore all skills by this author →
GitHub

zeroize-audit

Audit C/C++/Rust codebases for missing zeroization of sensitive data.

1|Updated Apr 7, 2026
Search Tags:#code analysis#security audit#sensitive data#security vulnerabilities#zeroization
One-click install
npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill zeroize-audit-rohanbhatia27
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: zeroize-audit
Source: https://github.com/rohanbhatia27/rohanstutoring-redesign/tree/main/.agents/skills/zeroize-audit
Command: npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill zeroize-audit-rohanbhatia27

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires clang, serena_mcp, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the detection of missing or ineffective zeroization of sensitive data in code, identifying potential security vulnerabilities and providing actionable feedback.

Core Features & Use Cases

  • Zeroization Detection: Identifies instances where sensitive data is not properly zeroized in code.
  • Assembly-Level Analysis: Analyzes code at the assembly level to detect vulnerabilities that might be missed at higher levels.
  • Control-Flow Verification: Verifies that zeroization is present on all paths of execution.
  • Use Case: Use this Skill to audit a C/C++/Rust project for missing zeroization of secrets, keys, passwords, or other sensitive data.

Quick Start

Use the zeroize-audit skill to scan your codebase for missing zeroization of sensitive data.

Frequently Asked Questions about zeroize-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect missing zeroization of sensitive data in C/C++ or Rust code?▼

Detect missing zeroization by running an automated security audit that scans C/C++/Rust codebases for vulnerabilities. This process identifies instances where secrets or passwords are not properly cleared from memory.

What is assembly-level analysis for security vulnerabilities?▼

Assembly-level analysis for security vulnerabilities examines compiled code instructions to detect missing zeroization that higher-level source code reviews might miss. It ensures sensitive data handling flaws are caught at the lowest execution level.

Does this zeroization audit require clang to run?▼

Yes, this zeroization audit requires the clang compiler tool to function. Optional integration with Serena MCP is also available to enable advanced control-flow verification and analysis features.

How do I verify zeroization is present on all execution paths?▼

Verify zeroization on all execution paths by utilizing control-flow verification during the security audit. This checks that sensitive data is properly cleared regardless of which execution branch the code takes.

What are the limitations of automated sensitive data security audits?▼

Limitations of automated sensitive data security audits include dependency on tools like clang for compilation and analysis. Complex control flows or highly obfuscated code paths may also challenge accurate zeroization detection.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

zeroize-audit

Detect missing zeroization of sensitive data in C/C++/Rust code.

Official
Advanced
weirdgmeweirdgme
4

devsecops

Automate security integration across CI/CD pipelines with policy-as-code enforcement.

Community
Advanced
ofelixdevofelixdev

zeroize-audit

Audit C/C++/Rust codebases for missing zeroization and compiler-removed wipe routines.

Community
Advanced
Ramprasad4121Ramprasad4121
1

zeroize-audit

Audits C, C++ and Rust codebases for zeroization vulnerabilities using LLVM IR and assembly analysis.

Community
Advanced