perl-security
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive security guide for Perl developers, promoting best practices such as Taint Mode and allowlist-based input validation.- [COMMAND_EXECUTION]: The skill contains references to destructive commands (e.g., 'rm -rf /'), but these are used exclusively within 'Bad' examples and 'Anti-Patterns' sections to demonstrate how command injection vulnerabilities occur and how to prevent them using safe alternatives like list-form system calls.- [REMOTE_CODE_EXECUTION]: The document identifies the use of 'eval' with user input as a critical anti-pattern and provides safe alternatives for dynamic logic.- [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The file operations examples emphasize path traversal prevention and secure file handling.- [SAFE]: The skill recommends well-established Perl security modules and configuration tools like 'perlcritic' to automate security audits.
Audit Metadata