rtk-ai/rtk

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

71 of your 92 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.94s · analysis 6.1s · 3.5 MB · GitHub API rate-limit (preflight)

https://github.com/rtk-ai/rtk · scanned 2026-06-05 09:51 UTC (5 days, 17 hours ago) · 10 languages

175 raw signals (89 security + 86 graph) 21st percentile · Rust · medium (20-100K LoC) System graph score 84 (lower by 23)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 17 hours ago · v2 · 57 actionable findings from 2 signal sources. 50 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 31 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	55.0	0.25	13.75
`testing_score`	22.0	0.20	4.40
`documentation_score`	96.0	0.15	14.40
`practices_score`	81.0	0.15	12.15
`code_quality`	35.1	0.10	3.51
Overall		1.00	61.0

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 3 Medium 9 Low 29 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 26 System graph 31 Crowd 0 Layer: Security 4 Software 8 Quality 28 Cicd 5 Api 1 Frontend 8 Network 3

Exclude dismissed / FP Exclude test files

All 461 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README_zh.md`	software	healthy	`README_zh.md`
`README_ko.md`	software	healthy	`README_ko.md`
`.semgrep.yml`	software	healthy	`.semgrep.yml`
`Cargo.toml`	software	healthy	`Cargo.toml`
`release-please-config.json`	software	healthy	`release-please-config.json`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`install.sh`	software	healthy	`install.sh`
`README_pt.md`	software	healthy	`README_pt.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`README_fr.md`	software	healthy	`README_fr.md`
`build.rs`	software	healthy	`build.rs`
`INSTALL.md`	software	healthy	`INSTALL.md`
`README_es.md`	software	healthy	`README_es.md`
`README_ja.md`	software	healthy	`README_ja.md`
`.release-please-manifest.json`	software	healthy	`.release-please-manifest.json`
`SECURITY.md`	software	healthy	`SECURITY.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`DISCLAIMER.md`	software	healthy	`DISCLAIMER.md`
`openclaw.plugin.json`	software	healthy	`openclaw/openclaw.plugin.json`
`README.md`	software	healthy	`openclaw/README.md`
`package.json`	software	healthy	`openclaw/package.json`
`index.ts`	software	healthy	`openclaw/index.ts`
`glab_mr_list_raw.json`	software	healthy	`tests/fixtures/glab_mr_list_raw.json`
`glab_issue_list_raw.json`	software	healthy	`tests/fixtures/glab_issue_list_raw.json`
`format_changes.json`	software	healthy	`tests/fixtures/dotnet/format_changes.json`
`format_empty.json`	software	healthy	`tests/fixtures/dotnet/format_empty.json`
`format_success.json`	software	healthy	`tests/fixtures/dotnet/format_success.json`
`TELEMETRY.md`	software	healthy	`docs/TELEMETRY.md`
`AUDIT_GUIDE.md`	software	healthy	`docs/usage/AUDIT_GUIDE.md`
`TRACKING.md`	software	healthy	`docs/usage/TRACKING.md`
`FEATURES.md`	software	healthy	`docs/usage/FEATURES.md`
`MAINTAINERS_APPLY.md`	software	healthy	`docs/maintainers/MAINTAINERS_APPLY.md`
`index.md`	software	healthy	`docs/guide/index.md`
`discover.md`	software	healthy	`docs/guide/analytics/discover.md`
`gain.md`	software	healthy	`docs/guide/analytics/gain.md`
`troubleshooting.md`	software	healthy	`docs/guide/resources/troubleshooting.md`
`what-rtk-covers.md`	software	healthy	`docs/guide/resources/what-rtk-covers.md`
`telemetry.md`	software	healthy	`docs/guide/resources/telemetry.md`
`configuration.md`	software	healthy	`docs/guide/getting-started/configuration.md`
`installation.md`	software	healthy	`docs/guide/getting-started/installation.md`
`quick-start.md`	software	healthy	`docs/guide/getting-started/quick-start.md`
`supported-agents.md`	software	healthy	`docs/guide/getting-started/supported-agents.md`
`ARCHITECTURE.md`	software	healthy	`docs/contributing/ARCHITECTURE.md`
`TECHNICAL.md`	software	healthy	`docs/contributing/TECHNICAL.md`
`CODING_PRACTICES.md`	software	healthy	`docs/contributing/CODING_PRACTICES.md`
`test-all.sh`	software	healthy	`scripts/test-all.sh`
`test-tracking.sh`	software	healthy	`scripts/test-tracking.sh`
`test-ruby.sh`	software	healthy	`scripts/test-ruby.sh`
`update-readme-metrics.sh`	software	healthy	`scripts/update-readme-metrics.sh`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`checkRtk`	software	healthy	`openclaw/index.ts:checkRtk`
`tryRewrite`	software	healthy	`openclaw/index.ts:tryRewrite`
`register`	software	healthy	`openclaw/index.ts:register`
`shouldRun`	software	healthy	`scripts/benchmark/run.ts:shouldRun`
`heading`	software	healthy	`scripts/benchmark/run.ts:heading`
`branch`	software	healthy	`scripts/benchmark/run.ts:branch`
`commit`	software	healthy	`scripts/benchmark/run.ts:commit`
`rtkMean`	software	healthy	`scripts/benchmark/run.ts:rtkMean`
`rawMean`	software	healthy	`scripts/benchmark/run.ts:rawMean`
`generateReport`	software	healthy	`scripts/benchmark/lib/report.ts:generateReport`
`saveReport`	software	healthy	`scripts/benchmark/lib/report.ts:saveReport`
`getResults`	software	healthy	`scripts/benchmark/lib/test.ts:getResults`
`getCounts`	software	healthy	`scripts/benchmark/lib/test.ts:getCounts`
`record`	software	healthy	`scripts/benchmark/lib/test.ts:record`
`testCmd`	software	healthy	`scripts/benchmark/lib/test.ts:testCmd`
`testSavings`	software	healthy	`scripts/benchmark/lib/test.ts:testSavings`
`testRewrite`	software	healthy	`scripts/benchmark/lib/test.ts:testRewrite`
`skipTest`	software	healthy	`scripts/benchmark/lib/test.ts:skipTest`
`vmExists`	software	healthy	`scripts/benchmark/lib/vm.ts:vmExists`
`vmRunning`	software	healthy	`scripts/benchmark/lib/vm.ts:vmRunning`
`vmCreate`	software	healthy	`scripts/benchmark/lib/vm.ts:vmCreate`
`vmStart`	software	healthy	`scripts/benchmark/lib/vm.ts:vmStart`
`vmExec`	software	healthy	`scripts/benchmark/lib/vm.ts:vmExec`
`vmTransfer`	software	healthy	`scripts/benchmark/lib/vm.ts:vmTransfer`
`vmWaitReady`	software	healthy	`scripts/benchmark/lib/vm.ts:vmWaitReady`
`vmBuildRtk`	software	healthy	`scripts/benchmark/lib/vm.ts:vmBuildRtk`
`vmDelete`	software	healthy	`scripts/benchmark/lib/vm.ts:vmDelete`
`vmEnsureReady`	software	healthy	`scripts/benchmark/lib/vm.ts:vmEnsureReady`
`_create_tarball`	software	healthy	`scripts/benchmark-sessions/lib/runner.py:24`
`_print_step`	software	healthy	`scripts/benchmark-sessions/lib/runner.py:38`
`_session_to_entry`	software	healthy	`scripts/benchmark-sessions/lib/runner.py:42`
`_tb_to_entry`	software	healthy	`scripts/benchmark-sessions/lib/runner.py:54`
`run_benchmark`	software	dead	`scripts/benchmark-sessions/lib/runner.py:66`
`parseSemver`	software	healthy	`hooks/pi/rtk.ts:parseSemver`
`rewriteCommand`	software	healthy	`hooks/pi/rtk.ts:rewriteCommand`
`__init__`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:26`
`register_hook`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:21`
`load_plugin_module`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:32`
`write_fake_rtk`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:41`
`load_callback`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:62`
`test_missing_rtk_skips_registering_pre_tool_call`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:74`
`test_missing_rtk_warns_only_once`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:90`
`test_check_rtk_found_is_quiet`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:105`
`test_check_rtk_caches_result_across_calls`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:116`
`test_rewrite_success_mutates_same_terminal_args_dict`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:127`
`test_rewrite_returncode_three_mutates_same_terminal_args_di…`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:140`
`test_rewrite_returncode_zero_mutates_when_rewrite_changes_c…`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:153`
`test_expected_passthrough_returncodes_do_not_warn_or_mutate`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:166`
`test_unexpected_returncode_warns_with_stderr_details`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:187`
`test_rewrite_timeout_warns_and_preserves_original_command`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:202`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`openclaw`	software	healthy	`openclaw`
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`dotnet`	software	healthy	`tests/fixtures/dotnet`
`docs`	software	healthy	`docs`
`usage`	software	healthy	`docs/usage`
`maintainers`	software	healthy	`docs/maintainers`
`guide`	software	healthy	`docs/guide`
`analytics`	software	healthy	`docs/guide/analytics`
`resources`	software	healthy	`docs/guide/resources`
`getting-started`	software	healthy	`docs/guide/getting-started`
`contributing`	software	healthy	`docs/contributing`
`scripts`	software	healthy	`scripts`
`benchmark`	software	healthy	`scripts/benchmark`
`lib`	software	healthy	`scripts/benchmark/lib`
`benchmark-sessions`	software	healthy	`scripts/benchmark-sessions`
`lib`	software	healthy	`scripts/benchmark-sessions/lib`
`Formula`	software	healthy	`Formula`
`hooks`	software	healthy	`hooks`
`pi`	software	healthy	`hooks/pi`
`hermes`	software	healthy	`hooks/hermes`
`tests`	software	healthy	`hooks/hermes/tests`
`rtk-rewrite`	software	healthy	`hooks/hermes/rtk-rewrite`
`opencode`	software	healthy	`hooks/opencode`
`antigravity`	software	healthy	`hooks/antigravity`
`codex`	software	healthy	`hooks/codex`
`cursor`	software	healthy	`hooks/cursor`
`kilocode`	software	healthy	`hooks/kilocode`
`cline`	software	healthy	`hooks/cline`
`copilot`	software	healthy	`hooks/copilot`
`windsurf`	software	healthy	`hooks/windsurf`
`claude`	software	healthy	`hooks/claude`
`.github`	software	healthy	`.github`
`hooks`	software	healthy	`.github/hooks`
`workflows`	software	healthy	`.github/workflows`
`src`	software	healthy	`src`
`learn`	software	healthy	`src/learn`
`analytics`	software	healthy	`src/analytics`
`discover`	software	healthy	`src/discover`
`hooks`	software	healthy	`src/hooks`
`core`	software	healthy	`src/core`
`parser`	software	healthy	`src/parser`
`cmds`	software	healthy	`src/cmds`
`dotnet`	software	healthy	`src/cmds/dotnet`
`jvm`	software	healthy	`src/cmds/jvm`
`ruby`	software	healthy	`src/cmds/ruby`
`js`	software	healthy	`src/cmds/js`
`rust`	software	healthy	`src/cmds/rust`
`cloud`	software	healthy	`src/cmds/cloud`
`git`	software	healthy	`src/cmds/git`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`pre-release`	cicd	healthy	`.github/workflows/cd.yml`
`build-prerelease`	cicd	healthy	`.github/workflows/cd.yml`
`release-please`	cicd	healthy	`.github/workflows/cd.yml`
`build-release`	cicd	healthy	`.github/workflows/cd.yml`
`update-latest-tag`	cicd	healthy	`.github/workflows/cd.yml`
`check-test-presence`	cicd	healthy	`.github/workflows/ci.yml`
`fmt`	cicd	healthy	`.github/workflows/ci.yml`
`clippy`	cicd	healthy	`.github/workflows/ci.yml`
`test`	cicd	healthy	`.github/workflows/ci.yml`
`security`	cicd	healthy	`.github/workflows/ci.yml`
`semgrep`	cicd	healthy	`.github/workflows/ci.yml`
`benchmark`	cicd	healthy	`.github/workflows/ci.yml`
`doc-review`	cicd	healthy	`.github/workflows/ci.yml`
`check-target`	cicd	healthy	`.github/workflows/pr-target-check.yml`
`build`	cicd	healthy	`.github/workflows/release.yml`
`build-deb`	cicd	healthy	`.github/workflows/release.yml`
`build-rpm`	cicd	healthy	`.github/workflows/release.yml`
`release`	cicd	healthy	`.github/workflows/release.yml`
`notify-discord`	cicd	healthy	`.github/workflows/release.yml`
`homebrew`	cicd	healthy	`.github/workflows/release.yml`
`update-next-release`	cicd	healthy	`.github/workflows/next-release.yml`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`scripts/benchmark/run.ts`
`10.0.1.10`	network	healthy	`src/cmds/cloud/aws_cmd.rs`
`54.1.2.3`	network	healthy	`src/cmds/cloud/aws_cmd.rs`
`10.0.2.20`	network	healthy	`src/cmds/cloud/aws_cmd.rs`
`10.0.1.5`	network	healthy	`src/cmds/cloud/aws_cmd.rs`
`10.0.1.6`	network	healthy	`src/cmds/cloud/aws_cmd.rs`
`54.0.0.10`	network	healthy	`src/cmds/cloud/aws_cmd.rs`
`10.0.0.0`	network	healthy	`src/cmds/cloud/aws_cmd.rs`
`192.168.1.1`	network	healthy	`src/cmds/cloud/container.rs`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`
`APP_PRIVATE_KEY`	cicd	healthy	`—`
`RTK_DISCORD_RELEASE`	cicd	healthy	`—`
`RTK_TELEMETRY_TOKEN`	cicd	healthy	`—`
`HOMEBREW_TAP_TOKEN`	cicd	healthy	`—`
`RTK_DOCS_ANTHROPIC_KEY`	cicd	healthy	`—`
`APP_CLIENT_ID`	cicd	healthy	`—`

Label	Layer	Status	Path
`gha::cd`	cicd	healthy	`.github/workflows/cd.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::pr-target-check`	cicd	healthy	`.github/workflows/pr-target-check.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::next-release`	cicd	healthy	`.github/workflows/next-release.yml`

Label	Layer	Status	Path
`FakeContext`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:17`
`FakeCompletedProcess`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:25`
`RtkRewritePluginTest`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:61`
`InstalledRtkRewritePluginTest`	software	healthy	`hooks/hermes/tests/test_rtk_rewrite_plugin.py:294`

Label	Layer	Status	Path
`port:12`	network	healthy	`scripts/test-all.sh`
`port:10`	network	healthy	`scripts/benchmark.sh`
`port:80`	network	healthy	`scripts/benchmark/cloud-init.yaml`
`port:05`	network	healthy	`scripts/benchmark/cloud-init.yaml`

Label	Layer	Status	Path
`postgresql`	data	healthy	`tests/fixtures/glab_mr_list_raw.json`
`postgres`	data	healthy	`scripts/benchmark/cloud-init.yaml`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`tests/fixtures/glab_mr_list_raw.json`
`vps::ec2`	hardware	healthy	`tests/fixtures/glab_mr_list_raw.json`

Label	Layer	Status	Path
`repobility-clone-cyj0wf7u`	software	healthy	`/tmp/repobility-clone-cyj0wf7u`

Label	Layer	Status	Path
`auth::src/cmds/system/env_cmd.rs`	security	healthy	`src/cmds/system/env_cmd.rs`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/ba9b93e4-31a5-4933-985a-32e596073110/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/ba9b93e4-31a5-4933-985a-32e596073110/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

rtk-ai/rtk

Complete repo analysis

file 50+

function 50+

directory 50+

job 21

service 9

env_var 7

pipeline 5

class 4

port 4

database 2

vps 2

repo 1

auth 1