Engineering

Find out if your app is open to this week's PHP and Node attacks, and close it

Your coding agent finds every place your apps run PHP or Node, tells you which are open to PHP2Shell and the October 21 Node.js flaws, and patches them with Vulnerability Fixes plugin by Cognition (fix-php-vuln, fix-node-vuln) after your OK, with a plain report of what is fixed, mitigated or waiting on your host. Based on a post by Cognition.

CloneKit@clonekitaiCreator
Passed the deep check · v1.0.0 · Oct 25

What your AI will deliver

  • Exposure/where-it-runs.md: every app, where it runs in production (image, managed platform, shared host, VPS), how its PHP or Node version is chosen, and who controls it (you, the code, or the host)
  • Exposure/inventory.md: Cognition's inventory table for each repo (file:line, current version, channel, pin, production or CI-only, tests) with each entry marked fixed, vulnerable, end-of-life or unknown
  • One focused branch or PR per approved repo, made by Cognition's skill, with before and after versions, test results from inside the new image and a rollback target
  • Host settings changed to a fixed runtime and redeployed, only where you approved it, with the version proven from the running app

How it runs

In your AI, with your accounts. It starts by researching your business. How kits work ›

  1. 1. Understand

    Researches your business first, then asks you 3 questions it can't answer alone

  2. 2. Choose

    Nothing to choose: the kit follows one path

  3. 3. Build

    8 steps, risky ones ask you first

  4. 4. Deliver

    5 checks before delivery

Tools it uses

You pay each tool directly, not CloneKit. Your AI checks which ones you already have.

Details