clojure-eval

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned for local Clojure REPL testing, and its data flow is limited to local nREPL sessions. However, it relies on an external `clj-nrepl-eval` binary with no installation or provenance details in the skill, creating a significant trust gap; overall this is suspicious due to unverifiable dependency risk rather than confirmed malicious behavior.

Confidence: 81%Severity: 72%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:25 PM
Package URL
pkg:socket/skills-sh/bhauman%2Fclojure-mcp-light%2Fclojure-eval%2F@8b8d40db60e0799d8e56cef7ee3282131fe1a6e0