CEK is a command-line utility for inspecting and exploring OCI container images without running them, supporting file listing, content reading, layer analysis, and image comparison across local daemons and remote registries.

It enables filesystem exploration through commands like inspect, ls, cat, compare, and export, working with Docker, Podman, containerd, and other OCI-compliant runtimes. The tool operates without root privileges, avoids registry rate limits by leveraging local daemon caches, and never executes containers during analysis.