perl-security

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No known issues

Quality

Content

80%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong, highly actionable security reference with lean executable code and good organization, held back from full marks by the absence of explicit validation feedback loops in its workflows and by being a single large inline file with no progressive disclosure to deeper references.

Suggestions

Add an explicit validate-fix-retry loop for at least the destructive/batch cases (e.g. run perlcritic, fix flagged issues, re-run until clean) to raise workflow clarity.

Split the larger reference material (perlcritic policy config, full web-security headers/CSRF/session guide) into one-level-deep files linked from SKILL.md to improve progressive disclosure and reduce inline length.

Dimension	Reasoning	Score
Conciseness	The body is code-forward and assumes Claude's competence — sections are tight executable Perl with brief inline comments and no padding explaining basic concepts Claude already knows, so every token earns its place.	3 / 3
Actionability	Provides fully executable, copy-paste-ready code throughout (untaint subroutines, three-arg open, list-form system, DBI placeholders, perlcritic configs) with concrete Good/Bad contrasts and specific commands.	3 / 3
Workflow Clarity	Sections are well-organized with a loose ordering ('Start with taint-aware input boundaries, then move outward') and a closing checklist, but there is no explicit sequenced workflow with validation checkpoints or validate-fix-retry feedback loops for the destructive/batch operations discussed.	2 / 3
Progressive Disclosure	Content is well-organized by clear headers but is entirely inline in a ~500-line SKILL.md with no bundle files; material such as the perlcritic configuration and full web-security guide could be split into one-level-deep reference files to ease navigation.	2 / 3
	Total	10 / 12 Passed

Description

82%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, well-targeted description with strong natural trigger terms and clear distinctiveness, weakened only by the absence of an explicit 'Use when...' trigger clause. Adding when-to-use guidance would raise completeness to full marks.

Suggestions

Add an explicit trigger clause, e.g. 'Use when writing or reviewing Perl code that handles user input, shell commands, files, databases, or web requests.'

Lead with verb-based actions (e.g. 'Validates input, prevents injection, executes processes safely') to make capabilities read as actions rather than covered topics.

Dimension	Reasoning	Score
Specificity	Lists multiple specific concrete capabilities — 'taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies' — rather than vague language, matching the anchor for listing several specific concrete items.	3 / 3
Completeness	Clearly states what the skill covers but lacks any 'Use when...' clause or equivalent explicit trigger guidance, so per the guideline completeness is capped at 2; the 'when' is missing rather than merely implied.	2 / 3
Trigger Term Quality	Includes natural terms a Perl developer would actually say — 'Perl security', 'taint mode', 'DBI parameterized queries', 'XSS/SQLi/CSRF', 'perlcritic' — giving good coverage of likely user phrasings.	3 / 3
Distinctiveness Conflict Risk	The 'Comprehensive Perl security' framing with Perl-specific mechanisms (taint mode, DBI, perlcritic) carves a clear niche unlikely to trigger for non-Perl skills.	3 / 3
	Total	11 / 12 Passed

Validation

87%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

Criteria	Description	Result
skill_md_line_count	SKILL.md is long (505 lines); consider splitting into references/ and linking	Warning
metadata_version	'metadata.version' is missing	Warning

	Total	14 / 16 Passed

Repository: affaan-m/ECC
Commit: 754b8dd

Reviewed: 3 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.