Find out if your app is open to this week's PHP and Node attacks, and close it
Your coding agent finds every place your apps run PHP or Node, tells you which are open to PHP2Shell and the October 21 Node.js flaws, and patches them with Vulnerability Fixes plugin by Cognition (fix-php-vuln, fix-node-vuln) after your OK, with a plain report of what is fixed, mitigated or waiting on your host. Based on a post by Cognition.
Lo que tu IA te va a entregar
- Exposure/where-it-runs.md: every app, where it runs in production (image, managed platform, shared host, VPS), how its PHP or Node version is chosen, and who controls it (you, the code, or the host)
- Exposure/inventory.md: Cognition's inventory table for each repo (file:line, current version, channel, pin, production or CI-only, tests) with each entry marked fixed, vulnerable, end-of-life or unknown
- One focused branch or PR per approved repo, made by Cognition's skill, with before and after versions, test results from inside the new image and a rollback target
- Host settings changed to a fixed runtime and redeployed, only where you approved it, with the version proven from the running app
Cómo funciona
En tu IA y con tus cuentas. Lo primero que hace es conocer tu negocio. Cómo funcionan los kits ›
- 1. Entender
Primero estudia tu negocio y después te hace 3 preguntas que no puede responder por su cuenta
- 2. Elegir
Nada que elegir: el kit sigue un solo camino
- 3. Hacer
8 pasos; en los delicados, te pregunta antes
- 4. Entregar
5 verificaciones antes de entregar
Herramientas que usa
Cada herramienta la pagas directo a quien la ofrece, no a CloneKit. Tu IA revisa cuáles ya tienes.
Detalles
Lo que el creador usa como base. Tu IA lo consulta mientras trabaja.
- Fuente
- Fuente
- Fuente
- Habilidad
- Habilidad
- The source of each app in a folder or git repo
- A coding agent that runs skills (Claude Code
- Codex
- Cursor
- Devin or Factory)
- Git
- Docker for building and testing patched images
- Access to the hosting dashboard or server for the parts the code doesn't control
Archivos de consulta que tu IA puede leer mientras trabaja y después.
- Find out if your app is open to this week's PHP and Node attacks, and close itREADME.md
- PHP and Node exposure reporttemplates/report.md
- Follow Cognition's SKILL.md files as written; this kit only adds the map, the live checks and the report
- Read-only until the person approves each repo, host change and major upgrade by name
- Never guess an image tag, digest, package release or a host's patch status
First version, a use case for the open-source Vulnerability Fixes plugin launched by Cognition.
Las mejoras les llegan a todos los que usan este kit. Ver historial de cambios ›
- Tipo
- Trabajo puntual
- Licencia
- Uso propio
- Usos
- 0
- Trabajos terminados
- 0