Safer (allows "-", for example):

my $bullet = sprintf qr/[%s]/, quotemeta join '', keys %bullets;
[download]

Alternative (shorter and returns a compiled regexp unlike the OP's and the above solutions):

my ($bullet) = map qr/[\Q$_\E]/, join '', keys %bullets;
[download]