zeroize-audit - Audit sensitive-data zeroization in native code
Detects missing, incomplete, or compiler-removed zeroization in C, C++, and Rust code using source, IR, assembly, and control-flow evidence.
Tags
Updated: 2026-10-08Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Detect missing zeroization
- Track sensitive data copies
- Compare optimized IR
- Analyze assembly retention
- Verify control-flow cleanup
- Generate runtime validation tests
- Generate finding proof-of-concepts
Inputs
- Repository root
- Compilation database
- Rust Cargo manifest
- Analysis configuration
- Optimization levels
- Analysis languages
- Translation-unit limit
- MCP usage mode
- MCP timeout
- PoC categories
- PoC output directory
- Assembly analysis setting
- Semantic IR setting
- CFG analysis setting
- Runtime test setting
Outputs
- Structured JSON report
- Finding files
- Analysis artifacts
- Generated proof-of-concepts
- Generated runtime test harnesses
Requirements
- C/C++ compile_commands.json or Rust Cargo.toml
- Compilable C/C++ translation units
- Passing cargo check for Rust
- Clang on PATH
- uvx on PATH for Serena
- uv on PATH for Rust analysis
- Nightly Rust toolchain
- Required analysis scripts
- PoC generation tool
- Read access to target codebase
- Temporary working-directory write access