perl-security
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill documents defensive coding patterns for Perl applications. It provides detailed guidance on using taint mode, performing input validation via allowlists, and safely managing file operations to prevent path traversal.
- [COMMAND_EXECUTION]: The content identifies command injection as a critical risk. It includes examples of dangerous command strings within code comments and 'Anti-Patterns' sections specifically to illustrate how vulnerabilities occur, while recommending the list-form of system() and exec() to mitigate these risks.
- [EXTERNAL_DOWNLOADS]: The skill discusses managing Perl dependencies via CPAN and highlights security practices such as pinning versions in a cpanfile and minimizing dependencies to reduce the application's attack surface.
Audit Metadata