skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vuln-template-injection

Validate client-side template injection vulnerabilities across AngularJS, Vue.js, and Handlebars frameworks.

Updated Jul 30, 2026
Search Tags:#xss#security-audit#pentest#web-vulnerability#template-injection
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill vuln-template-injection
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-template-injection
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/vuln-template-injection
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill vuln-template-injection

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the risk of template injection vulnerabilities in modern web applications by providing a structured, safe, and authorized methodology to detect and verify if user input is being evaluated by client-side or mixed-mode template engines.

Core Features & Use Cases

  • Framework Detection: Identifies active template engines including AngularJS, Vue.js, React, and Handlebars.
  • Safe Validation: Uses inert mathematical probes like 7*7 to confirm expression evaluation without triggering dangerous sandbox escapes or RCE chains.
  • Contextual Analysis: Distinguishes between client-side DOM injection and server-side template injection (SSTI) to ensure accurate risk assessment and reporting.

Quick Start

Use the vuln-template-injection skill to validate the template injection risk for the target parameter on the current authorized endpoint.

Frequently Asked Questions about vuln-template-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for client-side template injection vulnerabilities in web applications?▼

Detect template injection by applying inert mathematical probes like 7*7 to reflected parameters, confirming expression evaluation in frameworks like AngularJS, Vue.js, and Handlebars while adhering to strict safety gates and non-destructive limitations.

What is the difference between client-side template injection and server-side template injection (SSTI)?▼

Client-side template injection executes in the DOM via browser frameworks, while SSTI executes on the server. Contextual analysis distinguishes between the two to ensure accurate risk assessment and proper security audit reporting.

Can I use mathematical probes to safely detect template injection during a pentest?▼

Yes, safe validation uses inert mathematical probes like 7*7 to detect template injection. This confirms expression evaluation without triggering dangerous sandbox escapes or remote code execution chains.

Does template injection detection work with React and AngularJS frameworks?▼

Yes, template injection detection works with React, AngularJS, Vue.js, and Handlebars. Framework detection identifies active template engines to apply precise detection of expression evaluation in reflected parameters during security assessments.

What are the limitations of testing for template injection vulnerabilities?▼

Limitations include strict adherence to safety gates, authorization checks, and non-destructive probe limitations. This prevents triggering dangerous sandbox escapes or RCE chains during vulnerability validation.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

payload-reference-ssti

Identify Server-Side Template Injection vulnerabilities using safe canary markers.

Community
Advanced
Axel-DaMageAxel-DaMage
2

security-reviewer

Identify security vulnerabilities in code and infrastructure and generate audit reports.

Community
Advanced
stevengonsalvezstevengonsalvez

webcopilot

Chain 20+ security tools into a single web reconnaissance and vulnerability scanning pipeline.

Community
Advanced
AeonDaveAeonDave
15

tplmap

Automate SSTI detection and exploitation across template engines like Jinja2, Twig, and Smarty.

Community
Advanced