SSTI Server-Side Template Injection skill: what it does and how to install it

What it does. Provides detection probes to distinguish template injection from XSS, fingerprint engines from evaluation results and errors, and map engines to likely languages and frameworks. It documents engine-specific exploitation chains, sandbox bypasses, blind testing methods and related injection scenarios.

When to use it. For authorised security testing when user-controlled content may be evaluated by a server-side or client-side template engine. Use the companion scenarios and payload references for expanded engine-specific examples.