In Joker versions before 1.8.2, "joker --lint <file>" located a ".jokerd/" directory by walking up from the linted file and executed matching "linter.*" files from that directory before linting. Because these files are executable Joker/Clojure code, linting a file inside an untrusted repository could execute code supplied by that repository. This could be triggered by editor integrations or CI jobs that automatically run "joker --lint" on checked-out source code.