rtk
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's core purpose is plausible, and the external RTK installer appears to come from the same official org rather than an unrelated host. However, the instruction to prepend RTK to every terminal command gives a third-party CLI universal visibility into command arguments and output across sensitive workflows, which is broader than necessary and makes the 'always safe' claim unjustified. This looks more like an overbroad developer helper than confirmed malware.
Confidence: 85%Severity: 56%
Audit Metadata