payloads-ssti
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous command-line examples for running external security tools like TInjA, tplmap, and SSTImap to identify and exploit template injection vulnerabilities.
- [EXTERNAL_DOWNLOADS]: The documentation references and links to various external resources including GitHub repositories for pentesting tools and security research papers from PortSwigger, Hackmanit, and other security platforms.
- [CREDENTIALS_UNSAFE]: Includes an example of a Basic Authentication header with a Base64-encoded string (
bG9naW46c2VjcmV0X3Bhc3N3b3Jk) which decodes to 'login:secret_password'. This is clearly provided as a dummy example for educational/testing purposes in a CLI command and does not represent a leaked credential.
Audit Metadata