# Cognition Open-Sources an Agent Plugin that Helps Secure Systems against Recent Cybersecurity Threats

DevFeed: [Cognition Open-Sources an Agent Plugin that Helps Secure Systems against Recent Cybersecurity Threats](<https://devfeed.tech/articles/cognition-open-sources-an-agent-plugin-that-helps-secure-systems-against-recent-cybersecurity-threats-99009.md>)

Original publisher: [Read original article](<https://www.marktechpost.com/2026/10/24/cognition-devin-vulnerability-fixes-plugin-php2shell-nodejs-gitlab/>)

Author: Michal Sutter

Published: 2026-10-25T02:59:08Z

Content type: news

Language: en

Sources: [MarkTechPost](<https://devfeed.tech/sources/marktechpost.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Agent Skills](<https://devfeed.tech/topics/agent-skills.md>), [Developer skills](<https://devfeed.tech/topics/developer-skills.md>), [Test-driven development](<https://devfeed.tech/topics/tdd.md>), [Code review](<https://devfeed.tech/topics/code-review.md>)

Tags: [3](<https://devfeed.tech/tags/3.md>), [agent](<https://devfeed.tech/tags/agent.md>), [agent-skills](<https://devfeed.tech/tags/agent-skills.md>), [agentic-ai](<https://devfeed.tech/tags/agentic-ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [ai-infrastructure](<https://devfeed.tech/tags/ai-infrastructure.md>), [ai-shorts](<https://devfeed.tech/tags/ai-shorts.md>), [applications](<https://devfeed.tech/tags/applications.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [context-engineering](<https://devfeed.tech/tags/context-engineering.md>), [critical](<https://devfeed.tech/tags/critical.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [cybersecurity-threats](<https://devfeed.tech/tags/cybersecurity-threats.md>), [deployments](<https://devfeed.tech/tags/deployments.md>), [devin](<https://devfeed.tech/tags/devin.md>), [editors-pick](<https://devfeed.tech/tags/editors-pick.md>), [first](<https://devfeed.tech/tags/first.md>), [for-devs](<https://devfeed.tech/tags/for-devs.md>), [gitlab](<https://devfeed.tech/tags/gitlab.md>), [harness](<https://devfeed.tech/tags/harness.md>), [helps](<https://devfeed.tech/tags/helps.md>), [inventory](<https://devfeed.tech/tags/inventory.md>), [js](<https://devfeed.tech/tags/js.md>), [managed](<https://devfeed.tech/tags/managed.md>), [mit](<https://devfeed.tech/tags/mit.md>), [new-releases](<https://devfeed.tech/tags/new-releases.md>), [open](<https://devfeed.tech/tags/open.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [plugin](<https://devfeed.tech/tags/plugin.md>), [python](<https://devfeed.tech/tags/python.md>), [software-engineering](<https://devfeed.tech/tags/software-engineering.md>), [sources](<https://devfeed.tech/tags/sources.md>), [staff](<https://devfeed.tech/tags/staff.md>), [systems](<https://devfeed.tech/tags/systems.md>), [tech-news](<https://devfeed.tech/tags/tech-news.md>), [technology](<https://devfeed.tech/tags/technology.md>), [threats](<https://devfeed.tech/tags/threats.md>)

## AI overview

Cognition's MIT-licensed Devin Vulnerability Fixes plugin provides three agent skills for patching PHP2Shell, the October 2026 Node.js security release and a critical self-managed GitLab flaw. Each skill inventories repositories without changing them, waits for approval, verifies target versions against official sources, runs tests before and after patching in the production image, then opens one pull request per repository with test results and a rollback plan. The skills run in Devin and other agents that read SKILL.md files; installation requirements include git, a shell, Docker and registry access, with Node.js 22.20 or later for the npx installer. Managed runtimes, appliances and Electron apps are flagged rather than patched. The article reports no remediation benchmark and notes that validation depends on available tests.

## Source excerpt

Cognition released the Devin Vulnerability Fixes plugin, 3 MIT-licensed agent skills that inventory, patch and test PHP, Node.js and self-managed GitLab deployments hit by this week's critical RCE flaws, then open 1 PR per repo. The post Cognition Open-Sources an Agent Plugin that Helps Secure Systems against Recent Cybersecurity Threats appeared first on MarkTechPost.