perl-security
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a defensive educational resource for Perl developers. While it contains references to destructive system commands (e.g., 'rm -rf /'), these are explicitly used in the 'Anti-patterns' and vulnerability example sections to illustrate security risks rather than for malicious execution.
- [COMMAND_EXECUTION]: The guide documents secure process execution patterns, specifically recommending the use of list-form system() and exec() calls to prevent shell injection vulnerabilities.
- [REMOTE_CODE_EXECUTION]: It correctly identifies the use of 'eval' with user input as a high-risk anti-pattern and provides safe alternatives.
- [DATA_EXFILTRATION]: The skill promotes the use of Perl's Taint mode (-T) and robust input validation via allowlists and regular expressions to prevent unauthorized data access and manipulation.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were detected. The skill provides examples of parameterized DBI queries to securely handle database operations.
Audit Metadata