perl-environment-setup
Fail
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to download a shell script from
https://install.perlbrew.pland pipe it directly tobash. This pattern executes remote code without prior verification, posing a significant security risk if the source is compromised.\n- [EXTERNAL_DOWNLOADS]: Instructions involve cloning repositories from external GitHub accounts (tokuhirom/plenvandtokuhirom/Perl-Build) to install tools. These sources are not recognized as trusted organizations or well-known services.\n- [PERSISTENCE]: The installation guide includes commands that modify shell configuration files (such as~/.bashrc,~/.zshrc, and~/.config/fish/config.fish) to ensure the version managers and their environments are loaded in future sessions.\n- [COMMAND_EXECUTION]: The skill contains various shell commands for environment setup, including the use ofsudoto install system-level build dependencies.
Recommendations
- HIGH: Downloads and executes remote code from: https://install.perlbrew.pl - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata