OpenAI's php2shell checker returned UNKNOWN for all 65 sites tested

OpenAI released openai/php2shell-checker, a 99-line Node tool that flags vulnerable PHP versions by scanning Server and X-Powered-By headers. Run against 65 real websites, it returned UNKNOWN every time: 64 sites expose no PHP version, and mariadb.org sends only its hoster's name, Seravo.

• The checker compares versions against fixes 8.2.35, 8.3.36, 8.4.27 and 8.5.12
• PHP 8.1 and older branches are flagged regardless of patch number
• 64 of 65 sites send no PHP version in headers
• It ships as two Codex agent skills, including a local php -v check