Yeah, zizmor checks for template injection.

Nice