The outer $word is shifted in from the command line, so is tainted. Detaint it by checking and assigning. ($word) = $word =~ /^(\w+)$/ or die 'Bad User!'; for instance.

Update: Overlooked the backticks, you should also use absolute /path/to/spelled or set $ENV{PATH} as merlyn and Ovid suggest.