perl-cpan-ecosystem
Fail
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to install the
cpanmtool by downloading a script fromhttps://cpanmin.usand piping it directly into the Perl interpreter (curl -L https://cpanmin.us | perl). - [COMMAND_EXECUTION]: Provides instructions for installing system packages using
sudo apt install, which requires administrative privileges. - [COMMAND_EXECUTION]: Includes instructions to modify shell startup files (
~/.bashrcor~/.zshrc) to persist thelocal::libenvironment configuration.
Recommendations
- HIGH: Downloads and executes remote code from: https://cpanmin.us - DO NOT USE without thorough review
Audit Metadata