perl-security

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies. Use when reviewing Perl input handling, process execution, DBI queries, or web-facing code.

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

65%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is highly actionable with excellent executable code, but it is over-long for a SKILL.md, mixes in concept explanations Claude already knows, and is a flat single-file reference with no progressive disclosure or validation-checkpoint workflow.

Suggestions

Move peripheral detail (the full .perlcriticrc, per-framework web/session notes, anti-patterns) into references/ files and link to them from SKILL.md to reduce inline length and enable progressive disclosure.

Trim explanations of well-known concepts (what taint mode is, ReDoS mechanics) to one-liners or remove them, since the code examples already demonstrate the patterns.

Add an explicit validation/checklist workflow (e.g. run perlcritic, verify path traversal, check placeholders before shipping) with a validate→fix→retry loop for the destructive operations the skill covers.

Dimension	Reasoning	Score
Conciseness	Code is dense and earns its place, but the ~500-line body explains concepts Claude already knows (e.g. 'Perl's taint mode tracks data from external sources…', the ReDoS intro) and the Anti-Patterns section restates 'Bad' examples already shown inline, so it could be tightened.	3 / 5
Actionability	Copy-paste-ready Perl with concrete good/bad pairs, named modules (IPC::Run3, HTML::Entities, DBI), a real .perlcriticrc config, and exact CLI commands fully cover the common cases.	5 / 5
Workflow Clarity	'How It Works' gives a loose ordering and a Quick Checklist exists, but this is a pattern catalog rather than a sequenced workflow with explicit validate→fix→retry checkpoints for its destructive operations (SQL DELETE, process exec, file writes).	3 / 5
Progressive Disclosure	It is a single monolithic SKILL.md with no bundle files (references/scripts/assets absent) and all content — including perlcritic config and per-framework web notes that could be split out — inlined under section headers.	3 / 5
	Total	14 / 20 Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, complete, and well-triggered, concisely covering the Perl security domain with an explicit 'Use when' clause. It is a strong model description with no notable gaps.

Dimension	Reasoning	Score
Specificity	Enumerates concrete capabilities — 'taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies' — giving comprehensive, specific coverage rather than vague abstraction.	5 / 5
Completeness	Explicitly answers both what ('Comprehensive Perl security covering…') and when ('Use when reviewing Perl input handling, process execution, DBI queries, or web-facing code') with concrete trigger phrases.	5 / 5
Trigger Term Quality	Natural terms a reviewer would say ('reviewing Perl input handling', 'process execution', 'DBI queries', 'web-facing code') plus domain synonyms (web security / web-facing) give comprehensive keyword coverage.	5 / 5
Distinctiveness Conflict Risk	Clear Perl-specific niche with distinct triggers (taint mode, DBI, perlcritic) and minimal overlap risk with non-Perl skills.	5 / 5
	Total	20 / 20 Passed

Validation

87%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

Criteria	Description	Result
skill_md_line_count	SKILL.md is long (505 lines); consider splitting into references/ and linking	Warning
metadata_version	'metadata.version' is missing	Warning

	Total	14 / 16 Passed

Repository: affaan-m/ECC
Path: skills/perl-security/SKILL.md
Commit: d8409a4

Reviewed: 1 day ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.