add-rtk

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches installing a command-wrapping optimization tool, and the installer appears to be official RTK infrastructure rather than an unrelated payload. However, it persistently and silently hooks every Bash call through a third-party CLI, creating disproportionate visibility into all shell activity and a medium trust/scope risk even without confirmed malicious behavior.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jul 16, 2026, 04:20 PM
Package URL
pkg:socket/skills-sh/nanocoai%2Fnanoclaw%2Fadd-rtk%2F@abee545279f8d17f8020093ecd13c20bf9281994965a916b542fcb6fe0d434a2
Security Audit — socket — add-rtk