Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
Install
npx skills add trailofbits/skills --skill zeroize-auditnpx skills add trailofbits/skills --skill zeroize-audit -a claude-code -gnpx skills add trailofbits/skills --skill zeroize-audit -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/zeroize-audit/skills/zeroize-auditgh skill install trailofbits/skills zeroize-auditgit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/zeroize-audit/skills/zeroize-audit ~/.claude/skills/zeroize-audit # Claude Code
cp -R /tmp/trailofbits__skills/plugins/zeroize-audit/skills/zeroize-audit ~/.agents/skills/zeroize-audit # Codex, Cursor, Gemini CLI, Copilot, OpenCode