clojure-symbols
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the clj-kondo installation script from its official GitHub repository at
https://raw.githubusercontent.com/clj-kondo/clj-kondo/master/script/install-clj-kondo. This is a well-known technology tool from a reputable source. - [COMMAND_EXECUTION]: The skill uses several command-line tools including
clj-kondo,jq,clj-nrepl-eval, andripgrepfor code analysis, symbol searching, and REPL interactions. These operations are aligned with the stated purpose of finding and editing Clojure symbols. - [PRIVILEGE_ESCALATION]: Installation instructions include the use of
sudofor the Arch Linux package manager (pacman -S clj-kondo) andchmod +xfor the downloaded installation script. These are standard procedures for software installation and setup. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local Clojure source files and REPL outputs. While this presents an ingestion surface for potentially malicious comments or data, the skill uses structured parsing (jq/JSON) and focused tool calls that reduce the risk of obedience to embedded instructions. No specific exploits were found.
Audit Metadata