Prompt Template Injection

Exploits the model's training on templating languages (Jinja2, Handlebars, JSX, shell variable expansion). }}`, `{% ... }`), the model may process the content as a template directive rather than user data — activating the "execute template logic" behavior trained on code corpora.

• Detect template syntax in user input: {{, }}, {% %}, ${...}, <template>, [SYSTEM:]
• Detect special token sequences: <|system|>, <|im_start|>, [INST], <|endoftext|>
• YARA rule: yara/t01-prompt-injection.yar

Direct escalation path to Policy Puppetry (T2-level attack when combined with encoding). Chains to T1-AT-016 (Session State Manipulation) — template injection that claims to modify session variables creates persistent state claims.