Module::Signature includes a cpansign program which can be used to verify a signature prior to executing any code.
I generally do (in CPANPLUS) a z Modulename before testing a module just so I can verify a signature if one exists.
MJDsays "you can't just make shit up and expect the computer to know what you mean, retardo!"