diff --git a/scripts/ops/prod_security_audit.sh b/scripts/ops/prod_security_audit.sh
index 5743386..2cc5688 100755
--- a/scripts/ops/prod_security_audit.sh
+++ b/scripts/ops/prod_security_audit.sh
@@ -246,7 +246,7 @@ run_local_smoke() {
   local ok=0
   local debug_log
   debug_log="$(mktemp)"
-  trap 'rm -f "$debug_log"' RETURN
+  trap 'rm -f -- "${debug_log:-}"; trap - RETURN' RETURN
 
   while (( attempt <= max_attempts )); do
     ok=0