Scan repository dependencies for known vulnerabilities using the GitHub MCP Server's Dependabot toolset and the GitHub Advisory Database. Use when asked to check dependency security, audit lockfiles, or verify packages before merging.
Install
npx skills add github/copilot-advanced-security-plugin --skill dependency-scanningnpx skills add github/copilot-advanced-security-plugin --skill dependency-scanning -a claude-code -gnpx skills add github/copilot-advanced-security-plugin --skill dependency-scanning -a codex -ggemini skills install https://github.com/github/copilot-advanced-security-plugin.git --path skills/dependency-scanninggh skill install github/copilot-advanced-security-plugin dependency-scanninggit clone --depth 1 https://github.com/github/copilot-advanced-security-plugin /tmp/github__copilot-advanced-security-plugin
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/github__copilot-advanced-security-plugin/skills/dependency-scanning ~/.claude/skills/dependency-scanning # Claude Code
cp -R /tmp/github__copilot-advanced-security-plugin/skills/dependency-scanning ~/.agents/skills/dependency-scanning # Codex, Cursor, Gemini CLI, Copilot, OpenCode