Zeroize Audit

zeroize-audit (Claude Skill)

Audits C/C++/Rust code for missing zeroization and compiler-removed wipes. Pipeline: source scan → MCP/LSP semantic context → IR diff → assembly/MIR checks.

Findings

undefined

Prerequisites

C/C++

undefined

which clang uvx python3

Rust

undefined

# Quick check
cargo +nightly --version
uv --version

# Full preflight validation (checks all tools, scripts, and optionally crate build)
tools/validate_rust_toolchain.sh --manifest path/to/Cargo.toml
tools/validate_rust_toolchain.sh --manifest path/to/Cargo.toml --json  # machine-readable

Generate compile_commands.json (C/C++)

**CMake**

cmake -B build -DCMAKE_EXPORT_COMPILE_COMMANDS=ON

**Make/Bear**

bear -- make -j$(nproc)

Usage

**C/C++ only:**

{ "path": ".", "compile_db": "compile_commands.json" }

**Rust only:**

{ "path": ".", "cargo_manifest": "Cargo.toml" }

**Mixed C/C++ + Rust:**

{
  "path": ".",
  "compile_db": "compile_commands.json",
  "cargo_manifest": "Cargo.toml",
  "opt_levels": ["O0", "O1", "O2"],
  "mcp_mode": "prefer"
}

**Full C/C++ input:**

{
  "path": ".",
  "compile_db": "compile_commands.json",
  "opt_levels": ["O0", "O1", "O2"],
  "languages": ["c", "cpp"],

...