Description
perl-security is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It gives security guidance for Perl applications: input validation, injection prevention and secure coding. Its main topics are taint mode, validating and untainting input, keeping file-system and process execution constrained, running system commands safely, using parameterised DBI queries, and web security against cross-site scripting, SQL injection and CSRF. The skill covers CGI and frameworks such as Mojolicious, Dancer2 and Catalyst. Its approach starts at the input boundary, validating and untainting data before moving outward, and the examples show the safe defaults the agent should apply before shipping Perl code that handles user input, shell commands or network calls. It applies when handling user input, building web applications, reviewing code for vulnerabilities, using user-supplied file paths, running commands, or writing database queries. A skill is a SKILL.md file of instructions that an AI agent loads when a task calls for it. It is free and open source, and the skills.sh listing shows all three security audits passing.…
Highlights
- Taint mode and input untainting
- Constrained file and process handling
- Parameterised DBI queries
- XSS, SQL injection and CSRF protection
Ratings & Reviews
No ratings yet
Be the first to rate perl-security.
People also visit
django-security
Django security best practices, authentication, authorization, CSRF protection
defi-amm-security
Security checklist for Solidity AMM contracts, liquidity pools, and swap flows
enterprise-agent-ops
Operational controls for long-lived or cloud-hosted agent systems
perl-security FAQ
What does the perl-security skill do?
It guides an agent in writing secure Perl, covering taint mode, input validation, safe command execution, DBI queries and web attack prevention.
Which Perl web frameworks does it cover?
CGI, Mojolicious, Dancer2 and Catalyst.
What is taint mode?
Perl's built-in check that treats external input as untrusted until it is validated and untainted, which the skill uses as its starting point.
How do I install it?
Run: npx skills add https://github.com/affaan-m/ecc --skill perl-security
Is it free?
Yes. It is free and open source.
Are there security findings?
The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.
What are the best perl-security alternatives?
Popular alternatives to perl-security include django-security, laravel-security and security-review. See all perl-security alternatives