Cognition Open-Sources an Agent Plugin that Helps Secure Systems against Recent Cybersecurity Threats
Summary
- Cognition released the Devin Vulnerability Fixes plugin, an open-source set of agent skills targeting critical remote code execution advisories including PHP2Shell, Node.js, and GitLab.
- The plugin works across Devin and other coding agents that read SKILL.md files, such as Claude Code, Cursor, and GitHub Copilot.
- The remediation workflow includes a read-only inventory, an approval gate, version verification, before-and-after testing in production images, and generates one pull request per repository.
- It specifically addresses runtime layer vulnerabilities in base images, OS packages, and infrastructure-as-code rather than application dependencies alone.
Why it matters
This agent plugin automates complex infrastructure-level security remediation for severe RCE vulnerabilities across multiple coding agents, reducing manual toil for engineering teams.