Cognition open-sources three agent skills that patch PHP2Shell, the October Node.js release and a GitLab RCE

Cognition has packaged the remediation workflow it says it used for this week’s PHP and Node.js security releases as an open-source plugin. The Devin blog post is dated 22 October, and the repository was created the same day under the MIT license.

It is three Agent Skills, plain SKILL.md folders, so they are not tied to Devin. The README lists Devin, Claude Code, Codex, Cursor, Factory Droid, GitHub Copilot, Gemini CLI, OpenCode and Windsurf among the agents that read them.

What the three skills cover

Skill	Target, per the README	Fixed releases it patches to
fix-php-vuln	PHP2Shell, CVE-2026-109618 and CVE-2026-109619	8.2.35, 8.3.36, 8.4.27, 8.5.12
fix-node-vuln	Node.js 21 October security release, incl. CVE-2026-111497 (Brotli)	22.23.4, 24.22.1, 26.12.1
fix-gitlab-vuln	CVE-2026-110264, self-managed GitLab	19.5.1 and backports to 18.11.13

The workflow

Each skill follows the same five steps:

1. Inventory, read-only. Search Dockerfiles, version files, CI config, Helm charts, Terraform, Ansible, Chef and Puppet, and produce one table of what was found.
2. Approval gate. Nothing changes until a person picks the repos to patch. The blog says the agent calls out anything riskier than a patch bump first.
3. Patch to a confirmed target. The agent checks that the fixed tag, digest or package actually exists before it edits. “It never guesses versions.”
4. Test before and after. A baseline run, then the same tests inside the new production image. New failures and new deprecation warnings count as regressions.
5. One PR per repo, with before and after versions, test results, a risk label and a rollback target.

Install for any supported agent is one command, which needs Node.js 22.20 or later:

npx skills add CognitionAI/devin-vuln-fixes

There are also plugin-marketplace installs for Claude Code, Codex and Factory Droid, and the Devin marketplace.

The useful part even without an agent

The blog post doubles as a checklist of patching traps. Debian and Ubuntu backport the PHP fix without changing the upstream version, so php -v can still say 8.3.6 on a fixed Ubuntu 24.04 package; check the vendor advisory or package changelog instead. Images pinned by digest need a new digest, and floating tags need a rebuild. Changing Composer’s require.php “doesn’t patch anything”. Node.js 20 and older are end-of-life and “will not be fixed, but remain exploitable.”

Limits

Cognition publishes no fix rate or accuracy figures, and we have not run the skills. The README says that when public hosts are blocked, the agent should mark a target as unverified and let CI prove it. The repo had six stars when we checked. For the PHP flaws themselves, see our PHP2Shell post.