Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
OpenAI 開源 php2shell 版本檢查器：Codex 技能一鍵比對 PHP 版本，但「OK」不代表真安全 | 動區動趨-最具影響力的區塊鏈新聞媒體
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T080331Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). BlockTempo (Traditional Chinese), 22 October: OpenAI open-sourced php2shell-checker on GitHub, usable as a Codex skill or a one-line Node.js command,...
What it says, as the collector read it
OpenAI 開源 php2shell 版本檢查器：Codex 技能一鍵比對 PHP 版本，但「OK」不代表真安全 | 動區動趨-最具影響力的區塊鏈新聞媒體
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page cz/news/blocktempo/openai-php2shell-checker-codex-skill, snapshot 20261023T080331Z. Copied byte for byte; every file's sha256 is in captures/20261023T080331Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
BlockTempo (Traditional Chinese), 22 October: OpenAI open-sourced php2shell-checker on GitHub, usable as a Codex skill or a one-line Node.js command, which compares a PHP version against the two CVSS 9.2 flaws' affected range; it only reads versions, sends no attack traffic, and OpenAI stresses UNKNOWN does not mean patched. Created on 21 October (Taipei time) under Apache 2.0, with over 700 stars by the evening of 22 October. The curator did not fetch or run the tool; the page describes it and gives no instruction to the curator.
> OpenAI 在 GitHub 釋出開源工具 php2shell-checker，以 Codex 技能或一行 Node.js 指令比對 PHP 版本
_Curator's translation:_ "OpenAI released an open-source tool, php2shell-checker, on GitHub, which compares PHP versions through a Codex skill or a one-line Node.js command"
_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T171501Z, not necessarily this one):_ Taiwanese crypto outlet BlockTempo describes OpenAI's open-source php2shell-checker tool on GitHub (Codex skills phpcheck-url and phpcheck-server), which only compares version numbers and warns that UNKNOWN does not mean patched. It repeats CISA, Cloudflare and watchTowr reporting.
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "OpenAI 開源 php2shell 版本檢查器：Codex 技能一鍵比對 PHP 版本，但「OK」不代表真安全 | 動區動趨-最具影響力的區塊鏈新聞媒體". Selected mechanically, not read by a person.
Capture notes
Language zh-TW. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T080331Z · HTTP 200 · https://www.blocktempo.com/openai-php2shell-checker-codex-skill/
headers.json5d90c2ead37f4999ffa4a5f9613a43acb62df36efbf7d8460adfed364e924e27 1,163 bytespage.html101375f18a72db5b11795bc27f0cd811b4ad3c7eeb37eef183978ed0933d3d6c 174,106 bytesprovenance.jsonfce73b61529ea1b6601ae704aa48616e326a31e3910aeb69bf152151cf5a467d 1,762 bytesrendered.html27f56a099582f6d6a0af220eadfdddb2bad38dcbefe56ff653b8b85bf43ef7d1 178,800 bytesscreenshot.jpg2325cb8183bec12e1e140fd91d437f79b2ff617ac2b2b3482e1c79ea1dac7290 313,690 bytestext.txt8db46ec6b3d92fce1d4d9124253dc2736a1a8f9d96980bea7312f27ccf228d39 10,324 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →