php2shell-migration: an AI agent skill to patch and modernize legacy PHP apps

说明与用途

php2shell‑migration AI 技能自动检测运行的 PHP 版本，检查 CVE‑2026‑109618/109619 漏洞，规划并在单独分支上应用补丁和框架升级，运行测试并生成报告。

问题

Legacy PHP applications run on vulnerable PHP versions (CVE-2026-109618/109619) and older frameworks, making manual upgrades slow and risky.

结果

The skill automates detection of vulnerable PHP versions, plans and applies secure patches and framework upgrades on a safe branch, runs tests, and reports outcomes without deploying to production.

工作流

• Ask the agent to "check this project for PHP2Shell"
• Agent determines the actual PHP version serving the website
• Agent reports vulnerability status (affected, out of support, or fine)
• Agent plans the fix: apply PHP patch first, then framework upgrade
• Agent applies changes on a separate Git branch
• Agent runs tests on the branch
• Agent writes a report separating "fixed and checked" from "not checked yet"

证据

Ask your agent something like "check this project for PHP2Shell" and it will: Work out which PHP version actually serves your website, not just the one on your laptop

来源

Plan the fix: the PHP patch first, then any framework upgrade

来源

Apply the changes on a separate Git branch and run your tests

来源

It never deploys to production, never runs exploits, and never reports a test as passed unless it actually ran.

来源