zeroize-audit

Summary

Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis

SKILL.md

{
  "name": "zeroize-audit",
  "version": "0.1.0",
  "description": "Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis",
  "author": {
    "name": "Trail of Bits",
    "email": "opensource@trailofbits.com",
    "url": "https://github.com/trailofbits"
  },
  "mcpServers": {
    "serena": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/oraios/serena",
        "serena",
        "start-mcp-server",
        "--context",
        "claude-code",
        "--project-from-cwd"
      ],
      "_docs": "Serena wraps language servers (clangd for C/C++) and exposes semantic analysis as MCP tools. It auto-discovers compile_commands.json from the project root. See skills/zeroize-audit/references/mcp-analysis.md.",
      "env": {}
    }
  }
}

View raw file

Recommended skills

Browse all →

Claude Plugin

audit-context-building

Build deep architectural context through ultra-granular code analysis before vulnerability hunting

Claude Plugin

burpsuite-project-parser

Search and extract data from Burp Suite project files (.burp) for security analysis

Claude Plugin

differential-review

Security-focused differential review of code changes with git history analysis and blast radius estimation