Yes, that is the problem. When you just say "unzip" perl has to search your $ENV{PATH} to find the unzip path and with tainting mode on, perl doesn't trust $ENV{PATH}, thus leading to the error message. Specify the entire path to the executable.