clojure-symbols

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the clj-kondo installation script from its official GitHub repository at https://raw.githubusercontent.com/clj-kondo/clj-kondo/master/script/install-clj-kondo. This is a well-known technology tool from a reputable source.
  • [COMMAND_EXECUTION]: The skill uses several command-line tools including clj-kondo, jq, clj-nrepl-eval, and ripgrep for code analysis, symbol searching, and REPL interactions. These operations are aligned with the stated purpose of finding and editing Clojure symbols.
  • [PRIVILEGE_ESCALATION]: Installation instructions include the use of sudo for the Arch Linux package manager (pacman -S clj-kondo) and chmod +x for the downloaded installation script. These are standard procedures for software installation and setup.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local Clojure source files and REPL outputs. While this presents an ingestion surface for potentially malicious comments or data, the skill uses structured parsing (jq/JSON) and focused tool calls that reduce the risk of obedience to embedded instructions. No specific exploits were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 12:15 PM