Zeroize audit

Companion assets: Scripts (tools/…), configs (configs/…), schemas (schemas/…), prompts (prompts/…), and phased workflow markdown (workflows/…) live in the upstream Trail of Bits prodsec-skills zeroize-audit plugin. Paths below are relative to that tree (see upstream Trail of Bits prodsec-skills for companion files).

When to Use

• Auditing cryptographic implementations (keys, seeds, nonces, secrets)
• Reviewing authentication systems (passwords, tokens, session data)
• Analyzing code that handles PII or sensitive credentials
• Verifying secure cleanup in security-critical codebases
• Investigating memory safety of sensitive data handling

When NOT to Use

• General code review without security focus
• Performance optimization (unless related to secure wiping)
• Refactoring tasks not related to sensitive data
• Code without identifiable secrets or sensitive values