Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

zeroize-audit — Claude Skill · lingxling | DecimalAI

securityby lingxling

zeroize-audit — Claude Skill

lingxling/zeroize-audit

Source lingxling/awesome-skills-cn ↗License MIT

Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification.

SkillScore82Maintained

Automatic

Security & AppSec pack

Last verified 8/27/2026

What it changes

Passed 16 of 20 test cases with the skill, and 6 of 20 without it.

Without skill32%

With skill82%

Checks it passed that the model alone missed

Declines the GUI layout and event handling code review request.
Assigns C sensitive object IDs in the SO-0001 to SO-4999 range.
Assigns Rust sensitive object IDs in the SO-5000 to SO-9999 range.

and 14 more in the full report

11 fixed7 passed either way4 still failing0 broke

Pass-rate lift: +50 pp
Tokens: +195%
Agent turns: 0%
Response time: -20%

Model gemini-3.6-flashMeasured 8/27/2026v118 of 22 cases passed with skill · 20 comparable

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/lingxling-zeroize-audit/SKILL.md https://app.decimal.ai/s/lingxling-zeroize-audit/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add lingxling-zeroize-audit, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/lingxling-zeroize-audit/ and pins it in .decimal/skills.lock

decimalai skills add lingxling-zeroize-audit

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/lingxling-zeroize-audit/SKILL.md https://app.decimal.ai/s/lingxling-zeroize-audit/SKILL.md

Raw file: /s/lingxling-zeroize-audit/SKILL.md ↗ · machine-readable summary at /s/lingxling-zeroize-audit.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 11

Prompt

We are running an audit on `src/ssl/tls_key.c` with `mcp_mode=prefer`. Serena MCP service is unreachable. A data-flow trace indicates a `SECRET_COPY` finding supported by 1 source signal and no independent IR or ASM proof. What confidence level must `SECRET_COPY` receive?

What was checked, without and with the skill
Checked	Without skill	With skill
Downgrades the SECRET_COPY finding confidence rating to needs_review when MCP is unavailable under prefer mode.	Missed	Passed

case-17 · gemini-3.6-flash · 8/27/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md359 linessingle file

zeroize-audit — Claude Skill

When to Use

Auditing cryptographic implementations (keys, seeds, nonces, secrets)
Reviewing authentication systems (passwords, tokens, session data)
Analyzing code that handles PII or sensitive credentials
Verifying secure cleanup in security-critical codebases
Investigating memory safety of sensitive data handling

When NOT to Use

General code review without security focus
Performance optimization (unless related to secure wiping)
Refactoring tasks not related to sensitive data
Code without identifiable secrets or sensitive values

Purpose

Detect missing zeroization of sensitive data in source code and identify zeroization that is removed or weakened by compiler optimizations (e.g., dead-store elimination), with mandatory LLVM IR/asm evidence. Capabilities include:

Assembly-level analysis for register spills and stack retention
Data-flow tracking for secret copies
Heap allocator security warnings
Semantic IR analysis for loop unrolling and SSA form
Control-flow graph analysis for path coverage verification
Runtime validation test generation

Scope

Read-only against the target codebase (does not modify audited code; writes analysis artifacts to a temporary working directory).
Produces a structured report (JSON).
Requires valid build context (compile_commands.json) and compilable translation units.
"Optimized away" findings only allowed with compiler evidence (IR/asm diff).

Inputs

See {baseDir}/schemas/input.json for the full schema. Key fields:

Field	Required	Default	Description

Track record

Benchmark

16 / 20

test cases passed, vs 6 / 20 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

lingxling / awesome-skills-cn

antigravity-awesome-skills/skills/zeroize-audit/SKILL.md

View on GitHub ↗

License MITImported 8/3/2026Version v1

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

zeroize-audit — Claude Skill

When to Use

When NOT to Use

Purpose

Scope

Inputs

Track record

Benchmark

Adoption

SkillSafety

Source

Other skills for the same job

Related skills