exploiting-template-injection-vulnerabilities

SUSPICIOUS. The skill’s capabilities align with its stated offensive pentesting purpose, but that purpose itself gives the agent high-risk exploit capability. The largest concrete security issue is install trust: an unpinned clone of an old third-party repo and a PyPI package that does not match the claimed functionality. No direct credential theft or covert exfiltration is shown, but this is a high-risk exploit skill with questionable dependency provenance.

This is an active SSTI vulnerability scanner and exploitation-testing utility, not apparent package malware. Its purpose is security testing, but it includes payloads capable of remote command execution and file/configuration disclosure against vulnerable targets, creating a significant dual-use and authorization risk. It contains no hardcoded credentials, persistence, cryptomining, reverse shell, or covert exfiltration behavior. TLS verification is disabled and the output file path is unrestricted. The supplied fragment also contains a syntax error at the end.

The provided content documents an authorized security-testing agent, not executable malware. However, its stated functionality actively sends SSTI payloads and attempts server-side command execution and secret disclosure. This creates significant dual-use and misuse risk, especially without documented authorization controls. No evidence of supply-chain malware or local system compromise is present in the supplied material, but the actual implementation is required for a complete assessment.