[Bug]: `rtk` bypasses safety net

[DavidLapous]

Description

It seems that the rtk plugin (https://github.com/rtk-ai/rtk) can be used by llms to bypass the safetynet

Steps to Reproduce

install rtk and safety net, ask any reasonable llm to git commit -> rtk git commit. The wrapping bypasses the safety net.

Installation Method

OpenCode

Environment

• OS: macos
• Node.js Version: 26.0
• Safety Net Version: 0.9.0
• OpenCode Version: 1.15.5

Logs or Error Messages

Doctor Output

Screenshots

Additional Context

No response

[kenryu42]

Sorry for the late reply. The root problem is broader than rtk git commit: transparent command proxies can make Safety Net analyze the proxy instead of the underlying command.

I’m going to take time to design the right fix instead of shipping a one-off RTK patch, because this needs to address the class of wrapper/proxy bypasses without becoming whack-a-mole.