I note a security implication here; you may have it covered.

Can flatfile be edited to include:

Kaboom! <% system(rm *) %>
[download]

or other (possibly inadvertent) malicious code?

Will index.pl run this code?