perl-security
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a set of security guidelines and does not contain any functional malicious code. It promotes industry-standard best practices such as taint mode, input validation allowlists, and parameterized queries.
- [COMMAND_EXECUTION]: The skill contains potentially dangerous shell commands (e.g.,
rm -rf /) and unsafe Perl idioms (e.g., two-argumentopen). However, these are explicitly labeled as vulnerabilities within 'Bad' code examples and 'Anti-Patterns' sections to educate users on what to avoid. - [REMOTE_CODE_EXECUTION]: The documentation identifies the use of
evalwith user-supplied data as a remote code execution risk and includes it in the anti-patterns list for awareness. - [PROMPT_INJECTION]: No evidence of prompt injection or attempts to override agent behavior was found. The instructions are purely technical and educational.
- [DATA_EXFILTRATION]: No suspicious network activity or patterns of data exfiltration were detected. The skill focuses on secure local processing and safe database interactions.
Audit Metadata