perl-lint

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several command-line tools to perform its primary functions, including perlcritic for code analysis, perltidy for code formatting, and perl -c for syntax verification.
  • [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing official Perl modules Perl::Critic and Perl::Tidy using cpanm. These are standard, well-known packages from the Comprehensive Perl Archive Network (CPAN) registry.
  • [DYNAMIC_EXECUTION]: The use of perl -c in the syntax check workflow involves the execution of BEGIN and CHECK blocks within the Perl scripts being analyzed. While this is standard behavior for the Perl compiler's syntax check mode, it represents runtime execution of segments of the target file.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a processing engine for untrusted Perl source code files, creating an indirect prompt injection surface.
  • Ingestion points: Perl source files (.pl, .pm) are identified via find and processed by various analysis tools.
  • Boundary markers: No specific delimiters or safety instructions are defined for the agent when interpreting the output of the linting tools.
  • Capability inventory: The skill is authorized to use Bash for tool execution and Read for file access.
  • Sanitization: The skill does not perform sanitization on the input Perl files, relying on the static analysis tools to handle the content safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 10:27 AM