Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLIAbout this skill
Complete SSTI detection and exploitation methodology — engine fingerprinting, RCE payloads per engine (Jinja2, Twig, FreeMarker, Velocity, Mako, ERB, EJS, Pebble, Thymeleaf, Smarty, Pug, Handlebars, Nunjucks), sandbox escapes, blind detection, and report structure. Use when a parameter may be evaluated server-side ({{77}} returns 49), a stack trace names a template engine, or you're escalating SSTI to RCE.
Quick start
- Copy the install prompt. Use the green button above this README.
- Send it to your agent. Paste it into your coding agent’s chat and send.
- Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Review, license & listing details
This is an imported listing. We haven’t certified its safety, license, or compatibility. Skills may include executable scripts.
Only SKILL.md was scanned. Supporting files and scripts were not checked. No safety grade has been assigned.
2 potential findings · Scanned 11/4/2026 · Scanner 0.2.1
- medium: credential access — SKILL.md, line 436
- critical: reverse shell — SKILL.md, line 457
Content SHA-256: f0fcd0ef5315c341430ad60f0581e60f8d6a119b1cced45caba1a08aa59fe87a
About this listing
- Category
- Security
- Reported license
- MIT
- Listing language (estimated)
- English
- Review status
- Not individually reviewed
- Agent compatibility
- Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.