Trace dynamic template strings to detect SSTI vulnerabilities across multi-language codebases.
npx skills add https://github.com/utkusen/sast-skills --skill sast-ssti
Please help me install this Agent Skill. Skill: sast-ssti Source: https://github.com/utkusen/sast-skills/tree/main/sast-files/.agents/skills/sast-ssti Command: npx skills add https://github.com/utkusen/sast-skills --skill sast-ssti
SSTI (Server-Side Template Injection) vulnerabilities allow attackers to execute code by injecting dynamic template strings into rendering engines. This Skill provides a structured, three-phase workflow to locate, verify, and consolidate SSTI findings across a codebase to prevent remote code execution and data leakage.
Run the SSTI workflow against your repository to identify dynamic template rendering sites and triage potential SSTI risks.
High-intent search queries and answers about installing and using this skill.
Detect server-side template injection vulnerabilities by tracing dynamic template strings across a codebase to locate where user input reaches rendering calls. This process applies taint-tracking across multiple languages to identify potential remote code execution risks.
SSTI scanning works with multiple web frameworks including Python/Jinja2, Node/Nunjucks, Java/FreeMarker, and PHP Twig. It traces user input into rendering calls across these multi-language stacks to locate dynamic template rendering sites.
The best way to trace user input reaching template rendering calls is through a three-phase assessment: recon to identify rendering sites, batched verification to taint-track input, and a final merge to produce a consolidated report with actionable remediation guidance.
Remediate template injection risks using the phased artifacts generated during scanning, including sast/ssti-results.md. This final consolidated report provides clear risk classifications and specific recommendations to fix the dynamic template rendering vulnerabilities.
You can tailor vulnerability checks to your project's specific tech stack and rendering patterns using architecture-guided scanning. It leverages sast/architecture.md to adapt the analysis to the particular frameworks and rendering engines used in your codebase.
lee-toAnalyze a project's tech stack to generate an ARCHITECTURE.md with folder structure and dependency rules.
utkusenIdentify and map IDOR vulnerabilities in REST or GraphQL endpoints.
utsavthakurDetect and analyze injection vulnerabilities in web applications.
DCx7C5Identify and exploit security weaknesses in iOS and Android apps via OWASP MASTG.
