When using the `joker --lint <file>` command, the software searches for a `.jokerd/` directory by traversing upwards from the target file and executes any matching `linter.*` files found within that directory. Since these files contain executable Joker/Clojure code, linting a file within an untrusted repository allows for arbitrary code execution. This issue can be triggered by CI jobs or editor integrations that automatically run the linting process on checked-out source code.