perl-security

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a set of security guidelines and does not contain any functional malicious code. It promotes industry-standard best practices such as taint mode, input validation allowlists, and parameterized queries.
  • [COMMAND_EXECUTION]: The skill contains potentially dangerous shell commands (e.g., rm -rf /) and unsafe Perl idioms (e.g., two-argument open). However, these are explicitly labeled as vulnerabilities within 'Bad' code examples and 'Anti-Patterns' sections to educate users on what to avoid.
  • [REMOTE_CODE_EXECUTION]: The documentation identifies the use of eval with user-supplied data as a remote code execution risk and includes it in the anti-patterns list for awareness.
  • [PROMPT_INJECTION]: No evidence of prompt injection or attempts to override agent behavior was found. The instructions are purely technical and educational.
  • [DATA_EXFILTRATION]: No suspicious network activity or patterns of data exfiltration were detected. The skill focuses on secure local processing and safe database interactions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 10:23 AM