
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@sofagent/skillopt
Advanced tools
sofagent Skill 优化引擎——Skill 质量分析、安全审查、优化建议、自动重构。
npm install -g @sofagent/skillopt
安装后获得 sofagent-skillopt 命令。Node.js 18+。
scanSkillSafety() — Skill 文件安全扫描(注入检测 / 敏感信息泄漏 / 危险工具调用)findFiles() / scanFile() — 文件查找 + 单文件扫描(从 @sofagent/audit 引用)@sofagent/audit + @sofagent/coreFAQs
sofagent Skill 优化 — Skill 质量分析 / 优化建议 / 自动重构
The npm package @sofagent/skillopt receives a total of 0 weekly downloads. As such, @sofagent/skillopt popularity was classified as not popular.
We found that @sofagent/skillopt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.