clojure-paren-repair
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted Clojure, ClojureScript, and EDN files, creating a surface for indirect prompt injection. Malicious instructions hidden in comments or strings within these files could attempt to influence the agent during the repair process.
- Ingestion points: The skill instructions specify processing .clj, .cljs, .cljc, and .edn files.
- Boundary markers: No explicit delimiters or instructions are provided to ensure the agent ignores potentially malicious content within the target files.
- Capability inventory: The skill utilizes the clj-paren-repair command-line utility to modify files.
- Sanitization: The skill does not describe any sanitization or validation of the input file content before it is processed by the tool.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the clj-paren-repair utility via the shell. While this is the intended function, shell execution remains a risk factor if filenames or other parameters are derived from unvalidated user input.
Audit Metadata