Scan dependency manifests against known CVEs and remediate by upgrading vulnerable dependencies to patched versions, then rebuild and re-scan to confirm. Self-contained scan→fix→verify loop for any project with a dependency manifest.
Install
npx skills add microsoft/github-copilot-modernization --skill cve-remediationnpx skills add microsoft/github-copilot-modernization --skill cve-remediation -a claude-code -gnpx skills add microsoft/github-copilot-modernization --skill cve-remediation -a codex -ggemini skills install https://github.com/microsoft/github-copilot-modernization.git --path plugins/github-copilot-modernization/skills/cve-remediationgh skill install microsoft/github-copilot-modernization cve-remediationgit clone --depth 1 https://github.com/microsoft/github-copilot-modernization /tmp/microsoft__github-copilot-modernization
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/microsoft__github-copilot-modernization/plugins/github-copilot-modernization/skills/cve-remediation ~/.claude/skills/cve-remediation # Claude Code
cp -R /tmp/microsoft__github-copilot-modernization/plugins/github-copilot-modernization/skills/cve-remediation ~/.agents/skills/cve-remediation # Codex, Cursor, Gemini CLI, Copilot, OpenCode