Skill UI

Detects missing zeroization of secrets and flags compiler-optimized removals with mandatory assembly/IR evidence, helping auditors verify C/C++/Rust cryptographic code through dataflow, CFG, and runtime validation.

A specialized tool for auditing source code (C/C++/Rust) to ensure sensitive data (keys, passwords, PII) is properly zeroized. It analyzes memory handling at the assembly and IR level to detect if compiler optimizations, such as dead-store elimination, have accidentally removed or weakened the secure cleanup process. Essential for maintaining security in critical codebases.

Audits C, C++ and Rust source code for missing zeroization of secrets, keys and passwords, and detects wipes removed by compiler optimizations such as dead-store elimination. Uses LLVM IR and assembly evidence, control-flow verification and optional runtime tests. For authorized security assessments only.