zeroize-audit

Fail

Audited by Runlayer on Feb 27, 2026

Risk Level: HIGH
Scan Summary
Max Score
93%
Files
48
Flagged
29
Chunks
75
Flagged Files (29)
zeroize-audit/references/detection-strategy.mdHIGH
93.4%

Malicious tool definition detected

zeroize-audit/references/mcp-analysis.mdHIGH
92.8%

Malicious tool definition detected

If `mcp_mode=prefer`: set `mcp_available=false`, continue without MCP, apply confidence downgrades | | Serena can resolve at least one symbol in the TU | Log a warning; proceed but mark findings from that TU as `needs_review` | **Rust note**: Cargo does not natively produce `compile_commands.json`. Use `bear -- cargo build` or `bear -- cargo check` to generate it.

--- ## Post-Processing After collecting all MCP evidence and running IR/ASM/CFG analysis, apply confidence gates mechanically: ```bash python {baseDir}/tools/mcp/apply_confidence_gates.py \ --input /tmp/raw-report.json \ --out /tmp/final-report.json \ --mcp-available \ --mcp-required-for-advanced ``` Omit `--mcp-available` if MCP was unreachable.

zeroize-audit/tools/scripts/check_llvm_patterns.pyMEDIUM
88.6%

Malicious tool definition detected

zeroize-audit/references/compile-commands.mdMEDIUM
88.4%

Malicious tool definition detected

zeroize-audit/references/ir-analysis.mdMEDIUM
88.0%

Malicious tool definition detected

Look for: ```llvm %key.0 = phi i64 [ %loaded_key, %entry ], [ 0, %cleanup ] ``` If `%key.0` is used after the phi but the `0` arm is only reached on one path, the secret may persist in the non-zero arm.

zeroize-audit/tools/extract_compile_flags.pyMEDIUM
87.4%

Malicious tool definition detected

zeroize-audit/tools/generate_poc.pyMEDIUM
85.0%

Malicious tool definition detected

") return 2 # Create output directory try: os.makedirs(out_dir, exist_ok=True) except OSError as exc: sys.stderr.write(f"Error: cannot create output directory: {exc} ") return 3 # Write poc_common.h common_h = _generate_common_header(secret_fill, stack_probe_max) with open(os.path.join(out_dir, "poc_common.h"), "w") as f: f.write(common_h) # Generate PoCs makefile_targets: list[dict[str, str]] = [] manifest_entries: list[dict[str, Any]] = [] generated_count = 0 manual_count = 0 for finding in ex

zeroize-audit/tools/analyze_cfg.pyMEDIUM
84.1%

Tool passed security scan

Malicious tool definition detected

Description: to analyze") parser.add_argument("--out", required=True, help="Output JSON file") args = parser.parse_args() # Default patterns sensitive_patterns = [ r"\b(secret|key|seed|priv|private|sk|shared_secret|nonce|token|pwd|pass)\b" ] wipe_patterns = [ r"\bexplicit_bzero\s*\(", r"\bmemset_s\s*\(", r"\bOPENSSL_cleanse\s*\(", r"\bsodium_memzero\s*\(", r"\bzeroize\s*\(", ] # Build CFG builder = CFGBuilder(Path(args.src), sensitive_patterns, wipe_patterns) try: builder.build_from_source() exc

zeroize-audit/tools/scripts/check_mir_patterns.pyMEDIUM
83.5%

Malicious tool definition detected

zeroize-audit/tools/scripts/check_rust_asm.pyMEDIUM
81.8%

Malicious tool definition detected

zeroize-audit/tools/diff_ir.shMEDIUM
79.6%

Malicious tool definition detected

grep -qE \ 'llvm\.memset|volatile|explicit_bzero|sodium_memzero|OPENSSL_cleanse|SecureZeroMemory|memset_s|store i8 0|store i64 0|store i32 0' \ "$1" } # --------------------------------------------------------------------------- # Normalize all input files into temp files. # --------------------------------------------------------------------------- FILES=("$@")

zeroize-audit/tools/analyze_heap.shMEDIUM
77.0%

Malicious tool definition detected

zeroize-audit/tools/track_dataflow.shMEDIUM
76.3%

Malicious tool definition detected

# # Usage: # track_dataflow.sh --src path/to/file.c --config config.yaml --out /tmp/dataflow.json # # Detects: # - memcpy/memmove of sensitive buffers # - Struct assignments (potential copies) # - Function arguments passed by value # - Return by value (secrets in return values) usage() { echo "Usage: $0 --src <file> --out <analysis.json> [--config <config.yaml>]" >&2 } json_escape() { local s="$1" s="${s//\\/\\\\}" s="${s//\"/\\\"}" s="${s//$' '/\ }" s="${s//$'\t'/\\t}" printf '%s' "$s" } SRC=

zeroize-audit/tools/scripts/find_dangerous_apis.pyLOW
74.5%

Tool passed security scan

Malicious tool definition detected

Description: in_str: if ch == "\\" and k + 1 < len(line_text): k += 2 # skip escape sequence continue elif ch == '"': in_str = False else: if ch == '"': in_str = True elif ch == "/" and k + 1 < len(line_text) and line_text[k + 1] == "/": break # rest of line is a comment elif ch == "{": depth += 1 in_body = True elif ch == "}": depth -= 1 k += 1 if in_body: body_lines.append((j + 1, lines[j])) # 1-based line number if in_body and depth == 0: i = j + 1 break else: i += 1 continue # Within body, f

zeroize-audit/tools/analyze_asm.shLOW
73.4%

Malicious tool definition detected

# # Usage: # analyze_asm.sh --asm path/to/file.s --symbol secret_func --out /tmp/analysis.json # # Detects: # - Register spills to stack (movq/movdqa %reg, -offset(%rbp/%rsp)) # - Stack allocations that may retain secrets # - Missing red-zone clearing # - Secrets in callee-saved registers pushed to stack usage() { echo "Usage: $0 --asm <file.s> --out <analysis.json> [--symbol <func_name>]" >&2 } json_escape() { local s="$1" s="${s//\\/\\\\}" s="${s//\"/\\\"}" s="${s//$' '/\ }" s="${s//$'\t'/\\

zeroize-audit/workflows/phase-6-final-report.mdLOW
71.4%

Malicious tool definition detected

Tool: zeroize-audit/workflows/phase-6-final-report.md Description: # Phase 6 — Report Finalization ## Preconditions - Phase 5 complete (or skipped if zero findings): `poc_final_results.json` exists or findings are empty ## Instructions Spawn agent `4-report-assembler` via `Task` with: | Parameter | Value | |---|---| | `workdir` | `{workdir}` | | `config_path` | `{workdir}/merged-config.yaml` | | `mcp_available` | From `orchestrator-state.json` routing | | `mcp_required_for_advanced` | `{{mcp_req

zeroize-audit/workflows/phase-2-compiler-analysis.mdLOW
71.3%

Malicious tool definition detected

zeroize-audit/SKILL.mdLOW
70.5%

Malicious tool definition detected

- "Optimized away" findings only allowed with compiler evidence (IR/asm diff). --- ## Inputs See `{baseDir}/schemas/input.json` for the full schema.

zeroize-audit/prompts/system.mdLOW
66.3%

Tool passed security scan

zeroize-audit/workflows/phase-4-poc-generation.mdLOW
65.1%

Tool passed security scan

zeroize-audit/tools/scripts/semantic_audit.pyLOW
64.4%

Tool passed security scan

zeroize-audit/workflows/phase-3-interim-report.mdLOW
63.5%

Tool passed security scan

zeroize-audit/references/poc-generation.mdLOW
62.0%

Tool passed security scan

zeroize-audit/workflows/phase-7-test-generation.mdLOW
60.8%

Tool passed security scan

zeroize-audit/tools/emit_ir.shLOW
59.9%

Tool passed security scan

zeroize-audit/configs/c.yamlLOW
59.4%

Tool passed security scan

zeroize-audit/references/rust-zeroization-patterns.mdLOW
58.5%

Tool passed security scan

zeroize-audit/tools/scripts/check_rust_asm_aarch64.pyLOW
56.0%

Tool passed security scan

zeroize-audit/workflows/phase-1-source-analysis.mdLOW
51.4%

Tool passed security scan

Passed Files (19)Click to expand
zeroize-audit/tools/diff_rust_mir.shOK
49.6%

Tool passed security scan

zeroize-audit/workflows/phase-5-poc-validation.mdOK
49.2%

Tool passed security scan

zeroize-audit/prompts/report_template.mdOK
48.6%

Tool passed security scan

zeroize-audit/tools/analyze_ir_semantic.pyOK
47.1%

Tool passed security scan

zeroize-audit/tools/scripts/check_rust_asm_x86.pyOK
39.2%

Tool passed security scan

zeroize-audit/tools/emit_asm.shOK
38.4%

Tool passed security scan

zeroize-audit/tools/mcp/check_mcp.shOK
34.3%

Tool passed security scan

zeroize-audit/configs/default.yamlOK
34.0%

Tool passed security scan

zeroize-audit/prompts/task.mdOK
33.9%

Tool passed security scan

zeroize-audit/tools/validate_rust_toolchain.shOK
30.9%

Tool passed security scan

zeroize-audit/tools/emit_rust_asm.shOK
30.1%

Tool passed security scan

zeroize-audit/workflows/phase-0-preflight.mdOK
25.3%

Tool passed security scan

zeroize-audit/configs/rust.yamlOK
24.9%

Tool passed security scan

zeroize-audit/tools/emit_rust_mir.shOK
16.9%

Tool passed security scan

zeroize-audit/tools/mcp/apply_confidence_gates.pyOK
16.9%

Tool passed security scan

zeroize-audit/tools/emit_rust_ir.shOK
13.9%

Tool passed security scan

zeroize-audit/tools/mcp/normalize_mcp_evidence.pyOK
12.4%

Tool passed security scan

zeroize-audit/schemas/output.jsonOK
1.7%

Tool passed security scan

zeroize-audit/schemas/input.jsonOK
1.3%

Tool passed security scan

Audit Metadata
Max File Score
93%
Classification
UNKNOWN_SERVER
Files Scanned
48
Files Flagged
29
Chunks Analyzed
75
Analyzed
Feb 27, 2026, 08:37 PM
Security Audit — runlayer — zeroize-audit