perl-security
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of security documentation and best practices for Perl developers. All potentially dangerous commands (e.g.,
rm -rf /) are explicitly labeled as anti-patterns or included in comments to illustrate security risks like command injection. - [COMMAND_EXECUTION]: The skill provides examples of safe process execution using the list form of
system()andexec()to avoid shell interpolation. It also correctly identifies and warns against unsafe string-form system calls. - [DATA_EXPOSURE]: The skill demonstrates secure database practices using DBI placeholders to prevent SQL injection, and proper output encoding to mitigate XSS risks.
- [REMOTE_CODE_EXECUTION]: While the skill mentions dynamic execution via
eval, it does so strictly as an anti-pattern warning ('eval with user input (code injection)').
Audit Metadata