perl-security

Perl taint mode secures input validation by marking external data as tainted until explicitly untainted through regex patterns. This Skill enforces robust untaint operations to prevent untrusted data from executing commands or accessing files.

Prevent SQL injection in Perl DBI scripts by using parameterized queries with placeholders instead of string interpolation. This Skill identifies unsafe DBI usage and enforces placeholder-based execution to separate code from user-supplied data.

Protect Perl web applications from XSS and CSRF by applying strict output encoding and validating all input parameters. This Skill implements web security patterns that encode dynamic output and enforce safe defaults against cross-site threats.

You can automate Perl security reviews using perlcritic security policies to enforce safe execution and validate taint usage. This Skill checks code against perlcritic guidelines to identify unsafe file operations and process execution.

Perl taint mode flags file and process operations as unsafe when they use unvalidated external input for paths or arguments. This Skill enforces safe file operations and process execution by requiring strict input validation before untainting.