Do NOT open a public GitHub issue for security vulnerabilities.

Instead, use GitHub Private Vulnerability Reporting:

1. Go to the Security tab of the repository
2. Click "Report a vulnerability"
3. Fill in the form with details about the vulnerability

You should receive a response within 48 hours. If the vulnerability is confirmed, a fix will be released as soon as possible.

This project is a MiMoCode hook file (~50 lines). Security concerns are limited to:

• Command injection — The hook rewrites shell commands. Ensure rewrite rules don't introduce injection vectors.
• File system access — The hook writes to a log file when RTK_HOOK_LOG is set. Ensure the log path is safe.
• RTK binary — The hook delegates to rtk rewrite. Ensure RTK is installed from the official source.