Trace user input through PHP template rendering to identify SSTI risks.
npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-tpl-audit
Please help me install this Agent Skill. Skill: php-tpl-audit Source: https://github.com/0xShe/PHP-Code-Audit-Skill/tree/main/php-tpl-audit Command: npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-tpl-audit
Analyzes PHP source code to identify template injection (SSTI) risks and dangerous expression execution flows, tracing user-controlled content from input to render/compile and potential code execution to enable safe remediation.
Run the tpl-audit tool against your PHP project to locate SSTI risks and generate a remediation report.
High-intent search queries and answers about installing and using this skill.
PHP SSTI vulnerabilities are detected by tracing user input through template rendering and expression evaluation to map controllable templates, render paths, and execution chains across Twig, Blade, Smarty, or custom engines.
Tracing user input to template rendering paths requires analyzing PHP source code to follow data flow from entry points to render and compile functions, exposing controllable templates and execution chains with evidence.
A template injection security audit requires a trace output from the php-route-tracer containing sink evidence, controllability, and trace integrity, which is then applied to generate PoC frameworks and remediation guidance.
Yes, the audit tool supports custom template engines alongside Twig, Laravel Blade, and Smarty by identifying template rendering points and dangerous expression execution flows across these environments.
The best way to generate a PoC for PHP template injection risks is to analyze traced data flow from user input to render and compile paths, producing a PoC framework and remediation guidance based on execution chains.
PHP template injection leads to remote code execution when user-controlled content reaches template rendering and expression evaluation functions, exposing dangerous compile and execution chains through data flow tracing.
0xSheTrace PHP route handlers to sinks with branch evidence and controllability analysis.
jokken79Detect and validate file path traversal vulnerabilities in web applications.
blacklanternsecurityExploit Twig/PHP server-side template injection to achieve remote code execution.
YukiIto1999Detect and exploit NoSQL injection vulnerabilities in web applications using MongoDB and CouchDB.
