perl-lint
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several command-line tools to perform its primary functions, including
perlcriticfor code analysis,perltidyfor code formatting, andperl -cfor syntax verification. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing official Perl modules
Perl::CriticandPerl::Tidyusingcpanm. These are standard, well-known packages from the Comprehensive Perl Archive Network (CPAN) registry. - [DYNAMIC_EXECUTION]: The use of
perl -cin the syntax check workflow involves the execution ofBEGINandCHECKblocks within the Perl scripts being analyzed. While this is standard behavior for the Perl compiler's syntax check mode, it represents runtime execution of segments of the target file. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a processing engine for untrusted Perl source code files, creating an indirect prompt injection surface.
- Ingestion points: Perl source files (
.pl,.pm) are identified viafindand processed by various analysis tools. - Boundary markers: No specific delimiters or safety instructions are defined for the agent when interpreting the output of the linting tools.
- Capability inventory: The skill is authorized to use
Bashfor tool execution andReadfor file access. - Sanitization: The skill does not perform sanitization on the input Perl files, relying on the static analysis tools to handle the content safely.
Audit Metadata