Making the world's data accessible to AI. Home of AcquiOS for CRE & M&A acquisitions Bittensor Subnet 3️⃣3️⃣ 🌐
Joined August 2024
- Tweets275
- Following28
- Followers2.6K
- Likes755
PHP2Shell hit the tech world like a ton of bricks. And everyone had the same question: Is my system vulnerable?
Here's the catch. If you ask your AI agent, the model behind it was probably trained before PHP2Shell existed (we checked!), so it doesn't know what to look for.
The risk sits in the PHP runtime and reaches across your stack: mod_php, PHP-FPM behind Nginx, php-cgi, plus your network and firewall setup. Knowing whether you're exposed means understanding how those pieces fit together, and that's where traditional scans fall short.
An LLM with the right skill can connect the dots. In our tests, models that missed PHP2Shell found it once they had one SN33 security skill. Across 20 audits of PHP apps, that skill cut missed flaws by 41%.
Give it authorized access to your server and it can review the config, check your exposure to CVE-2026-109618 and CVE-2026-109619, and put the real fix first: upgrade PHP and restart every worker.
Care about security? Skill up on SS33, Skill Store 33, coming soon.
past ~48 hours in security:
> PHP: unauthenticated remote code execution
> GitLab: CVSS 10.0 remote code execution
> Node.js: Brotli decoder RCE + 9 other flaws
> Chrome: 353 security fixes
> Signal: a bug that can prevent calls fully ending
> eMudhra: compromised CA keys
> Oracle: 1,295 security patches
> Fortinet: critical/high fixes
> Atlassian: 176 vulnerability entries
and that’s after the Linux VM escape disclosed last week.
ask Codex / your agent to check your code, dependencies and infrastructure for exposure to these.
set up automations to regularly check for newly disclosed vulnerabilities and flag what needs patching.
ReadyAI retweeted
PHP2Shell is a critical remote code execution flaw in PHP, and most AI models had never heard of it. They were trained before it existed.
So we tested it. The same models that missed it found it once they had one SN33 security skill.
That's why we're building Skill Store 33 with @ReadyAI_. Your agent is only as current as the skills you give it.
PHP2Shell hit the tech world like a ton of bricks. And everyone had the same question: Is my system vulnerable?
Here's the catch. If you ask your AI agent, the model behind it was probably trained before PHP2Shell existed (we checked!), so it doesn't know what to look for.
The risk sits in the PHP runtime and reaches across your stack: mod_php, PHP-FPM behind Nginx, php-cgi, plus your network and firewall setup. Knowing whether you're exposed means understanding how those pieces fit together, and that's where traditional scans fall short.
An LLM with the right skill can connect the dots. In our tests, models that missed PHP2Shell found it once they had one SN33 security skill. Across 20 audits of PHP apps, that skill cut missed flaws by 41%.
Give it authorized access to your server and it can review the config, check your exposure to CVE-2026-109618 and CVE-2026-109619, and put the real fix first: upgrade PHP and restart every worker.
Care about security? Skill up on SS33, Skill Store 33, coming soon.
ReadyAI retweeted
I've watched a lot of AI security demos that only work on the app they were built for.
So we tested this skill on an app it never saw. GPT-6 Luna went from 19 of 33 known flaws to 32 of 33.
Skills make cheap models, frontier models...available on the Skills Store later this month 👀
ReadyAI retweeted
3D scenes used to be frontier-model work.
Here a small model does it with one @ReadyAI_ skill: same brief, same model, and the only change is the skill. Under 2 cents a scene.
Small models with the right skill keep closing the gap. What scene should it build next?
ReadyAI retweeted
This week I tried to get frontier models to help with basic defensive security work. Blocked at every step.
Even this trailer's hook tripped a safeguard.
So we gave small models one SN33 skill. All 4 found more flaws. DeepSeek: 87% for 2 cents.
What should it audit next for the Skills Store?
Same job as Claude’s new dashboards (with 10M views):
Claude w/ Opus 5.5 vs DeepSeek V4.1 Flash with one skill from ReadyAI SN33.
Watch both and judge the quality yourself.
Flash with SN33 Skill: 26x cheaper. 6x faster.
This is just the beginning of the Skill Store disruption with @ReadyAI_
ReadyAI retweeted
Subnet 33.
Presentation skillz for agents.
powered by Bittensor
ReadyAI retweeted
The presentation skills we're building on SN33 @ReadyAI_ keep getting better and better.
Latest: Prezi-style zooming decks. Average score 28 → 98 with the skill vs without, across 60 decks, 3 models.
Games and presentations so far. New domain next week. Store launches later this month.
How the scoring works: each deck opens in a real browser at 1920×1080. Every slide is checked for text that overflows, overlapping text, contrast below WCAG AA, type under 20px, untidy alignment, and figures the brief doesn't contain. 50 decks without the skill, 100 with it.
SN33 is closing in on six-figure ARR from the jobs API 📈
Last week's pace is now $95k. October is set to be the month we cross it.
September buyback just completed and it was 45% higher than August.
Extrinsic:
taostats.io/extrinsic/922141…
Skill Store 33 👀
Heads down on Skill Store 33 for @ReadyAI_. The results keep getting better.
Same model. Same prompt. One shot.
Without skills: it plays, but you can't read it and visual quality is poor.
With SN33 skills: readability scores 100% and quality pops off the page!
Last round, a budget model with skills matched the flagship at 1/6 the cost.
Sharing results from our next domain later this week 👀
ReadyAI retweeted
Grateful for the SEC putting forward clear rules and guidelines that have gone unresolved for too long.
One of the main items we have pushed for is clear guidelines on token buybacks for protocols like bittensor:native and its subnets. We now have them.
Great work @HesterPeirce!
Honored to meet with @HesterPeirce to discuss @ReadyAI_ and broader policy needs for crypto/AI protocols like Bittensor.
Thank you for your continued support of builders and clear, workable rules for the industry to keep it in the USA 🇺🇸
ReadyAI retweeted
Skill generation through the subnet available now: api.readyai.ai/jobs-api/docs
Skill Store 33 coming in October 🫡
From broken to polished: what SN33 skills do for a one-shot game build 🎮
We gave a coding agent a one-page spec for Deregistration Run, a 3D arena where you mine ore against 11 AI rivals. One prompt. No human edits. Then a headless bot played the result and ran 14 gameplay checks: rules, emissions, deregistration, balance, persistence.
Same model (gpt-5.6-terra). Same prompt. Same sandbox. The only difference was whether SN33 skills were installed.
The agent was never told the skills were there. It found them, picked the ones it needed, and read them before writing a line of code.
Without skills: 3 of 14 checks pass. The input API throws, so the test bot can't play it. Half the playfield is lost in the dark, and the miners are placeholders on a flat grid.
With SN33 skills: 14 of 14. It plays through epochs, deregistration and restart, with a lit arena, distinct ore tiers and a dynamic camera.
The cost math 💸
• gpt-6-astra (flagship), no skills: 14/14, $4.12 per game
• gpt-5.6-terra + SN33 skills: 14/14, $0.66 per game
• gpt-5.6-terra, no skills: 3/14, $0.27 per game
The cheaper model matches the flagship's score at about a sixth of the cost. Skills are the difference between a broken build and a game that plays.
