in reply to Trojan Horse? (taint mode)

ph3@r:

print "$\{system('echo \"hello\"')}";

Yet fear not so much:

chomp(my $input = <STDIN>); print "$input\n";
Feed this one the shell command above (a nice variable dereferencing scheme) and it'll print out literally.

Unless you're doing hazardous things with string eval, you're probably safe.