clojure-repl
Fail
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
install.shscript downloads and installs multiple CLI tools (clj-nrepl-eval,clj-paren-repair-claude-hook,clj-paren-repair) usingbbinfrom an external GitHub repository (https://github.com/bhauman/clojure-mcp-light.git) which is not an identified trusted vendor. - [REMOTE_CODE_EXECUTION]: The skill is designed to evaluate arbitrary Clojure code on a running system via
clj-nrepl-eval. This enables the execution of commands and logic within the context of the application being debugged or managed. - [COMMAND_EXECUTION]: The skill instructions direct the agent to execute shell commands to discover local network ports and interact with the nREPL server.
- [DYNAMIC_EXECUTION]: The core functionality relies on the runtime evaluation of Clojure forms (
eval) to inspect namespaces, vars, and live application state. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from the REPL which could contain instructions if the target environment contains untrusted data.
- Ingestion points: Response data from
clj-nrepl-evalcommands inSKILL.md. - Boundary markers: None identified for delimiting REPL output from agent instructions.
- Capability inventory: Execution of arbitrary Clojure code, local shell command execution, and discovery of local network services.
- Sanitization: No sanitization or filtering of REPL output is mentioned before processing by the agent.
Recommendations
- AI detected serious security threats
Audit Metadata