phpcheck-url — openai/php2shell-checker Agent Skill

使用方法

复制安装命令，在自己的智能体环境安装前先检查源码包。
从原始文档核对所需工具、凭据和支持的宿主。
说明输入材料与期望交付物，并对照来源检查输出。

npx skills add https://github.com/openai/php2shell-checker --skill phpcheck-url

开始前需了解

安装不包含模型订阅、API 额度或访问文件的权限。
仓库星数和安装量反映活跃情况，不等于独立质量或安全测试。

仓库原始内容

按源仓库内容呈现，保留标题、案例、代码、表格、链接以及原文引用的演示图片。

From this skill's directory, run:

node scripts/phpcheck.js "https://example.com" --json

Use HTTPS for a bare hostname. The checker reads Server and X-Powered-By headers. If the version is hidden, report unknown.

Compare the reported version with current PHP security guidance. Headers can be changed and vendor backports may fix an older version, so a server-side version and package check is stronger evidence. Do not run exploit probes.

Exit codes 1 and 3 mean vulnerable and unknown, not execution failures.