Can this help prevent SQL Injection in Perl scripts?

Yes, it enforces the use of DBI placeholders and parameterized queries, providing clear examples of safe versus dangerous database interaction patterns.

Is this applicable to Perl web frameworks?

Yes, it contains specific guidance for XSS prevention, CSRF protection, and secure header management for frameworks like Mojolicious, Dancer2, and Catalyst.

Does it support safe file and process operations?

Absolutely. It promotes the use of three-argument open calls to prevent command injection and list-form system/exec calls to bypass shell interpolation.

How does this skill handle Perl's Taint Mode?

The skill provides patterns for enabling the -T flag, sanitizing environment paths, and implementing robust untainting logic using specific regex allowlists.

How does it integrate with automated security tools?

The skill includes specialized perlcritic configurations focused on security themes, allowing you to automate the detection of unsafe coding practices.

Perl Security Patterns

Name: Perl Security Patterns
Author: affaan-m

byaffaan-m

•

156,033

•

セキュリティとテスト

Implements robust security guidelines for Perl applications, covering taint mode, input validation, and injection prevention.

The Perl Security Patterns skill equips Claude with the domain-specific knowledge required to write, review, and harden Perl code against modern security threats. It enforces best practices such as Taint Mode usage, three-argument open calls, and parameterized DBI queries to prevent common vulnerabilities like SQL injection, command injection, and cross-site scripting (XSS). This skill is essential for developers maintaining legacy Perl scripts or building new web applications with frameworks like Mojolicious and Catalyst, ensuring that every line of code adheres to high-security standards through untainting patterns and perlcritic integration.

主な機能

01ReDoS prevention and safe regular expression patterns

02Taint-aware programming and untainting patterns

03Safe process execution using list-form system calls

04SQL injection prevention via DBI placeholders

05156,033 GitHub stars

06Automated security auditing with perlcritic policies

ユースケース

01Reviewing and refactoring Perl code to pass security audits

02Hardening legacy Perl CGI scripts for modern environments

03Building secure backends for Mojolicious or Catalyst applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code perl-security

For use in Claude.ai and ChatGPT

主な機能

01ReDoS prevention and safe regular expression patterns

02Taint-aware programming and untainting patterns

03Safe process execution using list-form system calls

04SQL injection prevention via DBI placeholders

05156,033 GitHub stars

06Automated security auditing with perlcritic policies

ユースケース

01Reviewing and refactoring Perl code to pass security audits

02Hardening legacy Perl CGI scripts for modern environments

03Building secure backends for Mojolicious or Catalyst applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code perl-security

For use in Claude.ai and ChatGPT