# Zeroize Audit

Detects missing zeroization of sensitive data in source code and identifies zeroization...

- Repository: https://github.com/trailofbits/skills (7935 stars)
- Category: Engineering
- License: CC-BY-SA-4.0
- Last updated: 2026-10-28
- Runs scripts: yes, review before use

## Install

Claude Code: `npx skills add trailofbits/skills --skill zeroize-audit -g -a claude-code -y`
Codex: `npx skills add trailofbits/skills --skill zeroize-audit -g -a codex -y`
Cursor: `npx skills add trailofbits/skills --skill zeroize-audit -g -a cursor -y`
Gemini CLI: `npx skills add trailofbits/skills --skill zeroize-audit -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add trailofbits/skills`

## Description

Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# zeroize-audit

## When to Use
- Auditing cryptographic implementations (keys, seeds, nonces, secrets)
- Reviewing authentication systems (passwords, tokens, session data)
- Analyzing code that handles PII or sensitive credentials
- Verifying secure cleanup in security-critical codebases
- Investigating memory safety of sensitive data handling

## When NOT to Use
- General code review without security focus
- Performance optimization (unless related to secure wiping)
- Refactoring tasks not related to sensitive data
- Code without identifiable secrets or sensitive values

---

## Execution Contract

Use the agent environment's available tools for file access, shell commands, worker execution, and user input. The `allowed-tools` entry and role-file frontmatter are legacy host metadata; they do not define another environment's tool names or grant permissions there.

The rest: https://github.com/trailofbits/skills/blob/HEAD/plugins/zeroize-audit/skills/zeroize-audit/SKILL.md