rtk
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches an installation script and release artifacts from GitHub repositories (
akillness/rtkandrtk-ai/rtk). These downloads are directed at the vendor's own infrastructure and well-known project repositories. - [REMOTE_CODE_EXECUTION]: The installation script uses a common pattern to download and execute a shell script from GitHub (
curl -fsSL ... | sh). This is used for standard tool installation and setup as described in the skill's primary purpose. - [COMMAND_EXECUTION]: The skill provides numerous Bash wrappers to execute system commands for status checks, agent-specific initialization (e.g., patching configuration for Claude Code or Cursor), and running optimized developer tools like
git,cargo, andgrepthrough thertkbinary.
Audit Metadata