am-i-cooked

New CVEs drop every day. This skill tells you if you're cooked, then fixes it.

npx skills add noushiFlex/am-i-cooked

Ask your coding agent "am i cooked?". It reads your lockfiles, matches the exact versions you run against live vulnerability data, and answers with a verdict, a risk score and an upgrade plan. If you say yes, it upgrades on a separate branch, runs your tests after each step, re-scans to prove the CVEs are gone, and stops before pushing.

Install · What you get · Use it without an agent · CI · Supported lockfiles · Safety · FAQ

What you get

• One pass over 12 ecosystems and 18 lockfile formats: npm, pnpm, yarn, bun, pip, poetry, uv, pub (Flutter/Dart), Cargo, Go, Bundler, Composer, Gradle, NuGet, Hex, Swift and Haskell.
• Exact versions, not ranges. It reads what is installed (the lockfile), not what your manifest allows.
• A verdict you can act on: safe, a bit cooked, cooked, or unknown when nothing could be checked. It never says safe on an empty scan.
• A risk score (0-100) that separates known exploited (CISA KEV, EPSS, public exploit) from theoretical.
• One target version per package, with a safer in-major alternative when the full fix is a major jump.
• A safe fix flow: own branch, safe upgrades grouped, tests after each, risky majors discussed with you, then --baseline re-scan to confirm.
• Built for agents: guardrails against invented CVE data, plus JSON, Markdown and SARIF output for tools.

Real before/after run: examples/before-after.

Verdicts

Verdict	Meaning
safe	No known vulnerability matches your versions. Not a guarantee.
a bit cooked	Vulnerable packages, but nothing actively exploited or critical.
cooked	Listed in CISA KEV, or CVSS >= 9, or CVSS >= 7 with exploit signals.
unknown	Nothing was checked: no supported lockfile, or only unpinned ranges like django>=5.1.

The risk score takes the worst finding (CVSS / 10, times 1 for KEV, 0.9 if an exploit was seen, 0.75 otherwise), adds 2 per extra finding up to +15, and caps at 100. "Theoretical" means no known exploitation. It does not mean unreachable: this is not a reachability analysis.

Install

Claude Code

npx skills add noushiFlex/am-i-cooked

or by hand:

git clone https://github.com/noushiFlex/am-i-cooked
cp -R am-i-cooked/skills/am-i-cooked ~/.claude/skills/

Cursor, Codex and other agents

npx skills add noushiFlex/am-i-cooked -a cursor    # or -a codex, or -a '*' for every agent

Ready-made instructions to paste: Cursor rule, AGENTS.md snippet, Copilot instructions.

Then, in your project, ask: am i cooked?

Use it without an agent

The scanner is one file, no dependencies, Node 18+.

node skills/am-i-cooked/scripts/scan.mjs .             # human report
node skills/am-i-cooked/scripts/scan.mjs . --json      # structured, see report-schema.json
node skills/am-i-cooked/scripts/scan.mjs . --markdown  # PR comment / job summary
node skills/am-i-cooked/scripts/scan.mjs . --sarif     # GitHub code scanning

Flag	What it does
--fail-on=any|cooked|kev|none	Exit 1 at this threshold. Default any.
--strict	Exit 2 if any lockfile failed to parse or any git/file dependency was not checked.
--ignore=ID,ID	Hide findings you accepted. Also read from .cookedignore.
--baseline=before.json	Compare with an earlier --json report: fixed, remaining, new.
--offline	Answer from the local cache only. Fails loudly on a miss.
--no-cache	Force fresh answers.

Exit codes: 0 pass, 1 failed the --fail-on threshold, 2 nothing checked, scan error, or --strict incomplete.

Accept a risk

Hide a finding you reviewed, with --ignore=CVE-2020-28500 or a .cookedignore file at the root of the scanned directory:

# lodash ReDoS, our input is never user-controlled
CVE-2020-28500

Use the id the report prints. Ignored findings are counted (ignored in the JSON) and never counted in the verdict, so write the reason in the comment. The agent never edits this file.

Verify a fix

node skills/am-i-cooked/scripts/scan.mjs . --json > before.json
# ... upgrade ...
node skills/am-i-cooked/scripts/scan.mjs . --baseline=before.json
# Since baseline: cooked -> safe. 5 fixed, 0 remaining, 0 new.

Strict mode and direct vs transitive

Git and file dependencies are not published versions, so they cannot be matched. They are listed as a warning and the scan goes on. --strict turns that into a failure. Findings are tagged [direct] or [transitive] where the lockfile says so (package-lock.json, pubspec.lock, Gemfile.lock, packages.lock.json), and transitive rows tell you to upgrade the parent first.

Cache and offline

Answers are cached for 6 hours in ~/.cache/am-i-cooked (override with AM_I_COOKED_CACHE). Requests retry with backoff on rate limits and server errors, and fall back to stale cache if the network is down. --offline needs one earlier online scan of the same lockfiles.

In CI

- uses: actions/checkout@v4
- uses: noushiFlex/am-i-cooked@main
  with:
    fail-on: cooked   # any | cooked | kev | none

This is the beginning of the README. Read the rest at the original. Read the full README ↗