shadow-cljs-debug
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands for project maintenance, specifically
rm -rf .shadow-cljs .cpcacheto delete temporary build artifacts andnpx shadow-cljs compileto run the compiler. These are routine operations for managing shadow-cljs projects.\n- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external configuration data fromshadow-cljs.edn,deps.edn, andpackage.jsonto identify build issues. Although these files originate from the project workspace, they represent standard configuration formats.\n - Ingestion points: Ingests project configuration from
shadow-cljs.edn,deps.edn, andpackage.json.\n - Boundary markers: None present for delimiting configuration file content.\n
- Capability inventory: Local file deletion (
rm -rf) restricted to project cache directories and local command execution vianpx.\n - Sanitization: No explicit sanitization or validation logic is defined within the skill instructions.
Audit Metadata