zeroize-audit
zeroize-audit detects missing or compiler-optimized zeroization of sensitive data in C/C++ and Rust codebases by analyzing source code, intermediate representations, and assembly output. The plugin uses a 9-phase agent pipeline combining MCP semantic context, IR diff analysis, and control-flow verification to identify findings like MISSING_SOURCE_ZEROIZE, OPTIMIZED_AWAY_ZEROIZE, and REGISTER_SPILL, with mandatory proof-of-concept generation and validation for C/C++.
Install
Source: https://github.com/trailofbits/skills/tree/HEAD/plugins/zeroize-audit
What it's made of
11 agents · 1 skill · 1 MCP server
- Commands
- 0
- Agents
- 11
- Skills
- 1
- MCP servers
- 1
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
uvx- Talks to
github.com
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (trailofbits).