perl-cpan-ecosystem

Fail

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the user to install the cpanm tool by downloading a script from https://cpanmin.us and piping it directly into the Perl interpreter (curl -L https://cpanmin.us | perl).
  • [COMMAND_EXECUTION]: Provides instructions for installing system packages using sudo apt install, which requires administrative privileges.
  • [COMMAND_EXECUTION]: Includes instructions to modify shell startup files (~/.bashrc or ~/.zshrc) to persist the local::lib environment configuration.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cpanmin.us - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 29, 2026, 08:41 AM