Seems to me this would be an excellent use of a module that people tend think I abhor. Perl::Critic. Seems likely that it will flag most of the "potentially dangerous" code by default. And with a little careful tuning of the profile--turning off the warnings for benign code--, you should be able to get it to tell you about just those things you are interested in.