output compression
RTK is a high-performance CLI proxy that intercepts and compresses shell command output before your AI agent reads it, reducing bash output by up to 90%. It supports 100+ commands across git, testing, build tools, containers, and cloud CLIs, integrating with major AI coding assistants via hooks or plugins. The tool is distributed as a single Rust binary with <10ms overhead.
Reduce context window usage by filtering noisy test output, git logs, build logs, and deployment results down to essential information Integrate with Claude Code, Copilot, Cline, Cursor, and other AI agents to automatically rewrite commands and return compact output Compress output from package managers, container tools (Docker, Kubernetes), AWS CLI, and infrastructure tools (Pulumi) Monitor token savings across your shell sessions with the built-in analytics dashboard ⚠ REVIEW
Risk score 65/100
2 HIGH✓ 45 MEDIUM 4 LOW
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 2 likely real (100%) 5 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 2 high-signal, 3 mostly false-positive (hidden by default)
CHK-073 1 finding 1 likely
0% FP CHK-105 1 finding 1 likely
0% FP ▼ Show 3 checkers that are mostly false positives (5 findings) 51 findings click to expand
CHK-073 Curl Pipe Bash Install detected in scripts/benchmark/cloud-init.yaml
scripts/benchmark/cloud-init.yaml
AI: likely real likely ▼
CHK-105 Secret echoed to CI logs in .github/workflows/release.yml
.github/workflows/release.yml
AI: likely real likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in README_zh.md
README_zh.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in README_fr.md
README_fr.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in CLAUDE.md
CLAUDE.md
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in hooks/README.md
hooks/README.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in scripts/test-all.sh
scripts/test-all.sh
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in scripts/benchmark.sh
scripts/benchmark.sh
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in agents/technical-writer.md
.claude/agents/technical-writer.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in hooks/rtk-suggest.sh
.claude/hooks/rtk-suggest.sh
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in rules/search-strategy.md
.claude/rules/search-strategy.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in performance/SKILL.md
.claude/skills/performance/SKILL.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in references/testing-patterns.md
.claude/skills/rtk-tdd/references/testing-patterns.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in claude/test-rtk-rewrite.sh
hooks/claude/test-rtk-rewrite.sh
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in pi/README.md
hooks/pi/README.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in pi/README.md
hooks/pi/README.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in pi/rtk.ts
hooks/pi/rtk.ts
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in opencode/README.md
hooks/opencode/README.md
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in rtk-rewrite/__init__.py
hooks/hermes/rtk-rewrite/__init__.py
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in benchmark/cloud-init.yaml
scripts/benchmark/cloud-init.yaml
possible ▼
CHK-125b chown — ownership change — no scope constraint in benchmark/cloud-init.yaml
scripts/benchmark/cloud-init.yaml
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in lib/runner.py
scripts/benchmark-sessions/lib/runner.py
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in workflows/release.yml
.github/workflows/release.yml
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in workflows/ci.yml
.github/workflows/ci.yml
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in discover/rules.rs
src/discover/rules.rs
possible ▼
CHK-125b chown — ownership change — no scope constraint in discover/rules.rs
src/discover/rules.rs
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in discover/registry.rs
src/discover/registry.rs
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in discover/registry.rs
src/discover/registry.rs
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in discover/README.md
src/discover/README.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in core/toml_filter.rs
src/core/toml_filter.rs
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in core/tracking.rs
src/core/tracking.rs
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in cmds/README.md
src/cmds/README.md
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in hooks/README.md
src/hooks/README.md
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in hooks/permissions.rs
src/hooks/permissions.rs
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in analytics/ccusage.rs
src/analytics/ccusage.rs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in js/npm_cmd.rs
src/cmds/js/npm_cmd.rs
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in system/tree.rs
src/cmds/system/tree.rs
possible ▼
CHK-027 Outbound network call in skill — external network call (verify direction — could be benign API fetch)
.claude/skills/ship/SKILL.md
possible ▼
CHK-115 Credential file path referenced in skill content: .env`
.claude/skills/ship/SKILL.md
possible ▼
CHK-115 Credential file path referenced in skill content: /etc/passwd
.claude/skills/rtk-tdd/references/testing-patterns.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in hooks/permissions.rs
src/hooks/permissions.rs
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in README.md
README.md
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in CHANGELOG.md
CHANGELOG.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in CHANGELOG.md
CHANGELOG.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in INSTALL.md
INSTALL.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in INSTALL.md
INSTALL.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in CONTRIBUTING.md
CONTRIBUTING.md
possible ▼
CHK-032 Agent 'code-reviewer' has no explicit 'cannot do' boundary
.claude/agents/code-reviewer.md
possible ▼
CHK-032 Agent 'debugger' has no explicit 'cannot do' boundary
.claude/agents/debugger.md
possible ▼
CHK-032 Agent 'rtk-testing-specialist' has no explicit 'cannot do' boundary
.claude/agents/rtk-testing-specialist.md
possible ▼
CHK-032 Agent 'system-architect' has no explicit 'cannot do' boundary
.claude/agents/system-architect.md
possible ▼
▼ Show 5 false positives (9% of this view) Last scanned: Jul 11, 2026
More servers
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
skypilot-org/skypilot 85
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.