php2shell-migration: an AI agent skill to patch and modernize legacy PHP apps

Описание и применение

AI‑агент php2shell‑migration автоматически определяет версию PHP, проверяет наличие уязвимостей CVE‑2026‑109618/109619, планирует и применяет патчи и обновления фреймворков на отдельной ветке, запускает тесты и генерирует отчёт.

Задача

Legacy PHP applications run on vulnerable PHP versions (CVE-2026-109618/109619) and older frameworks, making manual upgrades slow and risky.

Результат

The skill automates detection of vulnerable PHP versions, plans and applies secure patches and framework upgrades on a safe branch, runs tests, and reports outcomes without deploying to production.

Рабочий процесс

• Ask the agent to "check this project for PHP2Shell"
• Agent determines the actual PHP version serving the website
• Agent reports vulnerability status (affected, out of support, or fine)
• Agent plans the fix: apply PHP patch first, then framework upgrade
• Agent applies changes on a separate Git branch
• Agent runs tests on the branch
• Agent writes a report separating "fixed and checked" from "not checked yet"

Доказательства

Ask your agent something like "check this project for PHP2Shell" and it will: Work out which PHP version actually serves your website, not just the one on your laptop

Источник

Plan the fix: the PHP patch first, then any framework upgrade

Источник

Apply the changes on a separate Git branch and run your tests

Источник

It never deploys to production, never runs exploits, and never reports a test as passed unless it actually ran.

Источник