The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous payloads intended to execute shell commands (e.g., id, whoami, cat /etc/passwd) on a target server by exploiting template engine vulnerabilities.
[EXTERNAL_DOWNLOADS]: Recommends downloading and using third-party security tools like sstimap, tplmap, and TInjA from external repositories to automate vulnerability discovery.
[DATA_EXFILTRATION]: Includes instructions for reading sensitive files such as /etc/passwd or wp-config.php from a target system using template filters like source() and include().

ssti-twig