{
  "name": "anything2shell Advisory & Exposure Agent",
  "version": "1.0.0",
  "description": "Passive HTTP header, DNS (SPF/DMARC/CAA), and Shodan InternetDB exposure scanner and field mitigation advisor for PHP2Shell, Node2Shell, HTTP2Shell, React2Shell, and Ruby2Shell.",
  "url": "https://anything2shell.com/api/check",
  "supportedInterfaces": [
    {
      "url": "https://anything2shell.com/api/check",
      "protocolBinding": "HTTP+JSON",
      "transport": "HTTPS"
    }
  ],
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": false
  },
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/markdown"
  ],
  "skills": [
    {
      "id": "check-domain-exposure",
      "name": "Passive Domain Exposure Check",
      "description": "Passively inspect a public domain's HTTP response headers, DNS security records, and Shodan InternetDB telemetry for PHP2Shell, Node2Shell, HTTP2Shell, React2Shell, and Ruby2Shell exposure.",
      "tags": [
        "security",
        "vulnerability-scanner",
        "php2shell",
        "node2shell",
        "http2shell"
      ],
      "examples": [
        "Check if example.com is exposed to PHP2Shell or Node2Shell"
      ]
    },
    {
      "id": "mitigate-2shell-advisories",
      "name": "Retrieve *2Shell Advisories, IoCs & Mitigations",
      "description": "Retrieve verified CVSS scores, FIRST.org EPSS probabilities, Indicators of Compromise (IoCs), and tested mitigation configurations for PHP2Shell, Node2Shell, and HTTP2Shell.",
      "tags": [
        "advisory",
        "ioc",
        "mitigation",
        "cve",
        "epss"
      ],
      "examples": [
        "Get patched versions and php.ini mitigations for PHP2Shell CVE-2026-109618 and CVE-2026-115560"
      ]
    }
  ]
}